last executing test programs:

23.386913886s ago: executing program 1 (id=960):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000340)=""/97, 0x38}], 0x2}, 0x7f}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

23.269555679s ago: executing program 1 (id=964):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/27, 0x1b}}], 0x1, 0x12141, 0x0)

23.245948439s ago: executing program 1 (id=965):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
geteuid()

23.230877029s ago: executing program 1 (id=967):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
setxattr$security_capability(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000080), &(0x7f0000000040)=@v3={0x3000000, [{0x9, 0xfffffff5}, {0x1, 0x6}]}, 0x18, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
truncate(&(0x7f0000000180)='./file0/file1\x00', 0x73d)

23.077402372s ago: executing program 1 (id=970):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3})

22.497122721s ago: executing program 1 (id=977):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x1a8, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0)

22.465350352s ago: executing program 32 (id=977):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x1a8, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0)

4.586419505s ago: executing program 4 (id=1671):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000a00)={[{@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a)
open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

4.394171918s ago: executing program 4 (id=1681):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x1cc03931, 0x0}, {0x1, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x3, 0x8, 0x8, &(0x7f0000000580)="89"}, {0x2, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x31d8, 0x0}, {0x2, 0x0, 0x247, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x5ad9, 0x0}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.63198269s ago: executing program 4 (id=1683):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20)

3.611531311s ago: executing program 4 (id=1685):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x550c, &(0x7f000000ab00)="$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")
symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

3.226969777s ago: executing program 4 (id=1702):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x1b34a93f, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

3.028729011s ago: executing program 4 (id=1707):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.028347751s ago: executing program 3 (id=1708):
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)={0x42, 0x75, 0x1, {0x37, "4216cd38c5fd6ef3c370d2e2e1aeae3d3d5aaf5db6e70a63b0c13ba988a723bf42d93822d76c273b3e515eb4905a500c7dc4e71a0fa337"}}, 0x42)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@fastopen={0x22, 0xb, "247adc59a54cf25815"}]}}}}}}}, 0x0)

2.989433651s ago: executing program 33 (id=1707):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.987731001s ago: executing program 3 (id=1710):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5}, 0x94)

2.978495141s ago: executing program 3 (id=1711):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0)

2.944975892s ago: executing program 3 (id=1713):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x550c, &(0x7f000000ab00)="$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")
symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2.44819618s ago: executing program 3 (id=1716):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)

2.321151852s ago: executing program 3 (id=1722):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='sys_enter\x00', r2}, 0x18)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

2.260355643s ago: executing program 34 (id=1722):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='sys_enter\x00', r2}, 0x18)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

2.207427504s ago: executing program 6 (id=1709):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000000d})
epoll_pwait(r1, &(0x7f0000000280)=[{}], 0x1, 0x7000000, 0x0, 0x0)

2.157874555s ago: executing program 6 (id=1726):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', <r1=>0x0, 0x0, 0xa000, 0x0, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x40, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

2.114656006s ago: executing program 6 (id=1727):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
fchdir(r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3)

2.093118106s ago: executing program 6 (id=1728):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000300))

1.654851013s ago: executing program 0 (id=1741):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1.103888632s ago: executing program 0 (id=1759):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)

1.062562463s ago: executing program 5 (id=1753):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
close(r0)
inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
close(0x3)

1.056578633s ago: executing program 0 (id=1754):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
futimesat(0xffffffffffffffff, 0x0, 0x0)

1.046814393s ago: executing program 5 (id=1756):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200400d4, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @private1, 0xf}, 0x1c)
r0 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

1.019806674s ago: executing program 5 (id=1757):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)

984.054624ms ago: executing program 0 (id=1760):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd28, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x2}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x40094)

928.496675ms ago: executing program 5 (id=1770):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
unlink(0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
rmdir(&(0x7f00000003c0)='./control\x00')

800.930777ms ago: executing program 0 (id=1762):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
syz_usb_disconnect(0xffffffffffffffff)

676.761229ms ago: executing program 5 (id=1767):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)

651.414219ms ago: executing program 5 (id=1771):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket(0x2c, 0x3, 0x0)
close(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

570.632471ms ago: executing program 2 (id=1784):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

294.198475ms ago: executing program 7 (id=1778):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
syz_read_part_table(0x593, &(0x7f00000005c0)="$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")

292.137285ms ago: executing program 2 (id=1779):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
pivot_root(0x0, 0x0)

232.556366ms ago: executing program 7 (id=1780):
unshare(0x400)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x400, 0x7)

231.899926ms ago: executing program 2 (id=1791):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, <r0=>0xffffffffffffffff}, 0x0, &(0x7f0000000300)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, 0x0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000001c0), 0x0}, 0x20)

212.617067ms ago: executing program 2 (id=1781):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x4, 0xd, 0x0, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1}, 0xc)

212.218607ms ago: executing program 7 (id=1782):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, 0x0, 0x0, 0x0)

189.028627ms ago: executing program 7 (id=1783):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

185.954987ms ago: executing program 2 (id=1795):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

132.199388ms ago: executing program 2 (id=1785):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mincore(&(0x7f0000432000/0xa000)=nil, 0xa000, &(0x7f0000000000)=""/166)
unlink(0x0)

92.959549ms ago: executing program 7 (id=1786):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

75.555049ms ago: executing program 7 (id=1787):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@delalloc}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

995.95µs ago: executing program 6 (id=1788):
mknodat$loop(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x2000, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x19, &(0x7f0000000300), 0x0)

0s ago: executing program 0 (id=1800):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@dev, 0x800, 0x1, 0x0, 0x0, 0x1}, 0x20)

kernel console output (not intermixed with test programs):

   T28] audit: type=1400 audit(1753398681.242:264): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   40.534895][ T1263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   40.549146][  T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.556348][ T1263] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.586365][  T306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   40.596723][  T285] EXT4-fs (loop1): unmounting filesystem.
[   40.606880][  T306] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   40.622546][  T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   40.634583][   T28] audit: type=1326 audit(1753398681.362:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.1.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004758e9a9 code=0x0
[   40.636207][  T306] usb 3-1: SerialNumber: syz
[   40.754694][ T1269] loop4: detected capacity change from 0 to 40427
[   40.765263][ T1269] F2FS-fs (loop4): invalid crc value
[   40.771763][ T1269] F2FS-fs (loop4): Found nat_bits in checkpoint
[   40.804623][ T1269] F2FS-fs (loop4): Start checkpoint disabled!
[   40.811503][ T1269] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   40.828846][   T28] audit: type=1400 audit(1753398681.552:266): avc:  denied  { link } for  pid=1268 comm="syz.4.396" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   40.864230][   T43] kworker/u4:2: attempt to access beyond end of device
[   40.864230][   T43] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   40.867213][  T306] usb 3-1: 0:2 : does not exist
[   40.885192][  T306] usb 3-1: unit 255 not found!
[   40.894228][  T306] usb 3-1: USB disconnect, device number 3
[   40.904898][  T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   40.922753][    T6] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   40.929792][    T6] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   40.936807][    T6] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   40.943768][    T6] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   40.950573][    T6] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   40.957463][    T6] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   40.965259][    T6] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   40.972983][    T6] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[   41.031007][ T1276] netlink: 27 bytes leftover after parsing attributes in process `syz.4.398'.
[   41.050084][   T28] audit: type=1400 audit(1753398681.772:267): avc:  denied  { read } for  pid=1277 comm="syz.4.399" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.072697][   T28] audit: type=1400 audit(1753398681.772:268): avc:  denied  { open } for  pid=1277 comm="syz.4.399" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.096203][   T28] audit: type=1400 audit(1753398681.772:269): avc:  denied  { ioctl } for  pid=1277 comm="syz.4.399" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.121608][    T6] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device
[   41.129213][    T6] pyra 0003:1E7D:2CF6.0003: couldn't install mouse
[   41.136223][    T6] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -32
[   41.144842][    T6] usb 4-1: USB disconnect, device number 4
[   41.175619][ T1279] fido_id[1279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   41.217727][   T28] audit: type=1400 audit(1753398681.942:270): avc:  denied  { connect } for  pid=1284 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   41.240828][   T28] audit: type=1400 audit(1753398681.942:271): avc:  denied  { write } for  pid=1284 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   41.287648][ T1292] loop0: detected capacity change from 0 to 512
[   41.296575][ T1292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   41.307780][ T1292] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.405: invalid indirect mapped block 4294967295 (level 0)
[   41.322066][ T1292] EXT4-fs (loop0): Remounting filesystem read-only
[   41.328767][ T1292] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.405: invalid indirect mapped block 4294967295 (level 1)
[   41.343097][ T1292] EXT4-fs (loop0): Remounting filesystem read-only
[   41.349806][ T1292] EXT4-fs (loop0): 1 orphan inode deleted
[   41.355567][ T1292] EXT4-fs (loop0): 1 truncate cleaned up
[   41.361199][ T1292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   41.381921][  T283] EXT4-fs (loop0): unmounting filesystem.
[   41.495898][ T1305] loop0: detected capacity change from 0 to 8192
[   41.502763][ T1309] loop1: detected capacity change from 0 to 256
[   41.509832][ T1309] exfat: Deprecated parameter 'namecase'
[   41.515943][ T1309] exfat: Deprecated parameter 'utf8'
[   41.523900][ T1309] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[   41.532997][  T306] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   41.560886][ T1311] overlayfs: missing 'lowerdir'
[   41.565838][   T28] audit: type=1400 audit(1753398682.282:272): avc:  denied  { remove_name } for  pid=1308 comm="syz.1.413" name="file3" dev="loop1" ino=1048622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   41.589069][   T28] audit: type=1400 audit(1753398682.282:273): avc:  denied  { rename } for  pid=1308 comm="syz.1.413" name="file3" dev="loop1" ino=1048622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   41.721079][ T1323] loop0: detected capacity change from 0 to 8192
[   41.734245][  T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   41.752994][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   41.770675][  T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   41.790444][  T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   41.809550][  T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   41.821981][  T306] usb 5-1: SerialNumber: syz
[   41.869938][  T306] usb 5-1: bad CDC descriptors
[   41.877999][  T306] usb-storage 5-1:1.0: USB Mass Storage device detected
[   41.887937][ T1337] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   41.907685][  T306] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   41.923867][ T1342] syz.1.428 (1342): /proc/1341/oom_adj is deprecated, please use /proc/1341/oom_score_adj instead.
[   41.924370][  T306] scsi host1: usb-storage 5-1:1.0
[   41.953375][   T24] usb 3-1: Using ep0 maxpacket: 16
[   41.964880][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.975921][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.986078][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   41.999035][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   42.008414][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.018860][   T24] usb 3-1: config 0 descriptor??
[   42.204839][ T1375] cgroup: fork rejected by pids controller in /syz0
[   42.295558][  T331] tipc: Left network mode
[   42.430227][   T24] microsoft 0003:045E:07DA.0004: unbalanced collection at end of report description
[   42.446919][   T24] microsoft 0003:045E:07DA.0004: parse failed
[   42.466128][   T24] microsoft: probe of 0003:045E:07DA.0004 failed with error -22
[   42.511071][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.518505][ T1394] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.526310][ T1394] device bridge_slave_0 entered promiscuous mode
[   42.535261][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.542374][ T1394] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.550074][ T1394] device bridge_slave_1 entered promiscuous mode
[   42.619658][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.626739][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.634036][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.641066][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.657104][  T290] usb 3-1: USB disconnect, device number 4
[   42.688679][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   42.697064][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.704648][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.727189][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   42.735483][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.742516][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.750030][ T1402] loop3: detected capacity change from 0 to 40427
[   42.750151][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   42.765359][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.766800][ T1402] F2FS-fs (loop3): Invalid log blocks per segment (4278190089)
[   42.772399][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.772604][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   42.780169][ T1402] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   42.793996][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   42.803875][ T1402] F2FS-fs (loop3): invalid crc value
[   42.817835][ T1402] F2FS-fs (loop3): Found nat_bits in checkpoint
[   42.824743][  T331] device bridge_slave_1 left promiscuous mode
[   42.830946][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.848778][  T331] device bridge_slave_0 left promiscuous mode
[   42.865176][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.874882][  T331] device veth1_macvtap left promiscuous mode
[   42.878601][ T1402] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   42.880938][  T331] device veth0_vlan left promiscuous mode
[   42.889199][ T1402] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   42.948582][  T284] syz-executor: attempt to access beyond end of device
[   42.948582][  T284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   43.001391][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.002730][ T1412] loop1: detected capacity change from 0 to 512
[   43.015326][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.024359][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.032037][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.043961][ T1412] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   43.044773][ T1394] device veth0_vlan entered promiscuous mode
[   43.066667][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.077808][ T1394] device veth1_macvtap entered promiscuous mode
[   43.086065][ T1412] EXT4-fs (loop1): 1 truncate cleaned up
[   43.096408][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   43.105614][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.114251][ T1412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   43.136921][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   43.159614][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.176172][   T19] usb 5-1: USB disconnect, device number 3
[   43.187432][  T285] EXT4-fs (loop1): unmounting filesystem.
[   43.232351][ T1423] loop1: detected capacity change from 0 to 256
[   43.244503][ T1423] FAT-fs (loop1): Directory bread(block 64) failed
[   43.252192][ T1423] FAT-fs (loop1): Directory bread(block 65) failed
[   43.259055][ T1423] FAT-fs (loop1): Directory bread(block 66) failed
[   43.265943][ T1423] FAT-fs (loop1): Directory bread(block 67) failed
[   43.272500][ T1423] FAT-fs (loop1): Directory bread(block 68) failed
[   43.279683][ T1423] FAT-fs (loop1): Directory bread(block 69) failed
[   43.286465][ T1423] FAT-fs (loop1): Directory bread(block 70) failed
[   43.307135][ T1423] FAT-fs (loop1): Directory bread(block 71) failed
[   43.317304][ T1423] FAT-fs (loop1): Directory bread(block 72) failed
[   43.318099][ T1430] loop0: detected capacity change from 0 to 128
[   43.325486][ T1429] loop2: detected capacity change from 0 to 512
[   43.336602][ T1423] FAT-fs (loop1): Directory bread(block 73) failed
[   43.353721][ T1429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   43.378808][ T1430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   43.390652][ T1429] EXT4-fs (loop2): 1 truncate cleaned up
[   43.393624][ T1430] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   43.409139][ T1429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   43.450955][ T1430] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop0' because it doesn't have stable inode numbers
[   43.465225][ T1429] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.459: corrupted in-inode xattr
[   43.493969][ T1429] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1732: inode #15: comm syz.2.459: unable to update i_inline_off
[   43.507724][ T1394] EXT4-fs (loop0): unmounting filesystem.
[   43.516913][ T1429] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #15: comm syz.2.459: corrupted in-inode xattr
[   43.529376][ T1429] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.459: corrupted in-inode xattr
[   43.561607][  T287] EXT4-fs (loop2): unmounting filesystem.
[   43.576948][ T1451] SELinux:  policydb version 0 does not match my version range 15-33
[   43.585346][ T1451] SELinux: failed to load policy
[   43.626676][ T1459] IPv6: NLM_F_CREATE should be specified when creating new route
[   43.659322][ T1467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.474'.
[   43.681923][ T1469] loop2: detected capacity change from 0 to 2048
[   43.705433][ T1475] loop0: detected capacity change from 0 to 256
[   43.756742][ T1469]  loop2: unable to read partition table
[   43.760321][ T1477] loop0: detected capacity change from 0 to 1024
[   43.765982][ T1469] loop2: partition table beyond EOD, truncated
[   43.775315][ T1469] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[   43.787062][ T1477] EXT4-fs: Ignoring removed i_version option
[   43.808097][ T1477] EXT4-fs (loop0): Test dummy encryption mode enabled
[   43.825829][  T103]  loop2: unable to read partition table
[   43.831665][  T103] loop2: partition table beyond EOD, truncated
[   43.836437][ T1477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   43.865014][ T1477] EXT4-fs error (device loop0): __ext4_remount:6610: comm syz.0.479: Abort forced by user
[   43.886633][ T1477] EXT4-fs (loop0): Remounting filesystem read-only
[   43.896384][ T1477] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[   43.905985][ T1477] EXT4-fs error (device loop0): __ext4_remount:6610: comm syz.0.479: Abort forced by user
[   43.916962][ T1477] EXT4-fs (loop0): Remounting filesystem read-only
[   43.923647][ T1477] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[   43.937679][ T1394] EXT4-fs (loop0): unmounting filesystem.
[   44.144004][ T1502] loop2: detected capacity change from 0 to 40427
[   44.153857][ T1502] F2FS-fs (loop2): invalid crc value
[   44.160578][ T1502] F2FS-fs (loop2): Found nat_bits in checkpoint
[   44.188064][ T1502] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   44.720339][ T1563] netlink: 888 bytes leftover after parsing attributes in process `syz.3.516'.
[   44.740804][ T1563] netlink: 137 bytes leftover after parsing attributes in process `syz.3.516'.
[   44.750893][ T1563] sch_tbf: burst 720 is lower than device lo mtu (65550) !
[   45.013298][ T1606] loop1: detected capacity change from 0 to 512
[   45.015458][ T1604] loop0: detected capacity change from 0 to 2048
[   45.026788][ T1606] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   45.050997][ T1606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[   45.063828][ T1606] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.537: corrupted in-inode xattr
[   45.076158][ T1606] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.537: couldn't read orphan inode 15 (err -117)
[   45.088620][ T1606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   45.114932][ T1604]  loop0: unable to read partition table
[   45.120792][ T1604] loop0: partition table beyond EOD, truncated
[   45.127255][ T1604] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[   45.143730][  T285] EXT4-fs (loop1): unmounting filesystem.
[   45.167863][ T1615] loop1: detected capacity change from 0 to 512
[   45.189190][ T1615] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   45.218756][ T1615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[   45.227693][ T1615] EXT4-fs (loop1): orphan cleanup on readonly fs
[   45.234502][ T1615] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949761 > max in inode 13
[   45.244785][ T1615] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949762 > max in inode 13
[   45.255400][ T1615] EXT4-fs (loop1): 1 truncate cleaned up
[   45.261045][ T1615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   45.275323][ T1615] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.540: dx entry: limit 65535 != root limit 120
[   45.287590][ T1615] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.540: Corrupt directory, running e2fsck is recommended
[   45.305419][  T285] EXT4-fs (loop1): unmounting filesystem.
[   45.360283][ T1633] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   45.503497][ T1641] loop2: detected capacity change from 0 to 512
[   45.529164][ T1644] loop1: detected capacity change from 0 to 2048
[   45.588939][ T1644]  loop1: unable to read partition table
[   45.594739][ T1644] loop1: partition table beyond EOD, truncated
[   45.600927][ T1644] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[   45.636424][  T103]  loop1: unable to read partition table
[   45.651104][  T103] loop1: partition table beyond EOD, truncated
[   45.658833][ T1654] loop3: detected capacity change from 0 to 128
[   45.714807][ T1654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   45.725234][ T1654] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   45.760832][ T1654] fscrypt (loop3, inode 12): Unsupported encryption flags (0x5d)
[   45.793090][   T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   45.816929][  T284] EXT4-fs (loop3): unmounting filesystem.
[   45.974115][   T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.994444][   T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.009938][   T19] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   46.019534][   T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.039383][   T19] usb 1-1: config 0 descriptor??
[   46.041118][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   46.041131][   T28] audit: type=1400 audit(1753398686.762:286): avc:  denied  { append } for  pid=1685 comm="syz.1.573" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   46.459645][ T1721] loop3: detected capacity change from 0 to 256
[   46.491151][ T1721] FAT-fs (loop3): Directory bread(block 64) failed
[   46.504039][ T1721] FAT-fs (loop3): Directory bread(block 65) failed
[   46.520421][ T1721] FAT-fs (loop3): Directory bread(block 66) failed
[   46.535880][ T1721] FAT-fs (loop3): Directory bread(block 67) failed
[   46.547974][ T1721] FAT-fs (loop3): Directory bread(block 68) failed
[   46.560223][ T1721] FAT-fs (loop3): Directory bread(block 69) failed
[   46.571359][ T1721] FAT-fs (loop3): Directory bread(block 70) failed
[   46.582482][ T1721] FAT-fs (loop3): Directory bread(block 71) failed
[   46.595679][ T1721] FAT-fs (loop3): Directory bread(block 72) failed
[   46.608837][ T1721] FAT-fs (loop3): Directory bread(block 73) failed
[   46.673840][ T1720] syz.3.588: attempt to access beyond end of device
[   46.673840][ T1720] loop3: rw=2049, sector=1224, nr_sectors = 12 limit=256
[   46.708912][ T1728] loop2: detected capacity change from 0 to 1024
[   46.726957][ T1728] EXT4-fs: Ignoring removed nomblk_io_submit option
[   46.744840][ T1728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   46.786753][  T287] EXT4-fs (loop2): unmounting filesystem.
[   46.828224][ T1736] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.836195][ T1736] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.858326][   T19] hid-led: probe of 0003:27B8:01ED.0005 failed with error -71
[   46.881423][   T19] usb 1-1: USB disconnect, device number 3
[   46.888247][   T28] audit: type=1400 audit(1753398687.612:287): avc:  denied  { mount } for  pid=1737 comm="syz.3.595" name="/" dev="ramfs" ino=21809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   46.913656][   T28] audit: type=1400 audit(1753398687.642:288): avc:  denied  { unmount } for  pid=1737 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   46.984335][   T28] audit: type=1400 audit(1753398687.712:289): avc:  denied  { create } for  pid=1745 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   47.032615][ T1750] loop2: detected capacity change from 0 to 256
[   47.032614][   T28] audit: type=1400 audit(1753398687.712:290): avc:  denied  { write } for  pid=1745 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   47.074901][ T1750] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   47.256334][ T1754] loop1: detected capacity change from 0 to 40427
[   47.267818][ T1754] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   47.285519][ T1754] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   47.317523][ T1754] F2FS-fs (loop1): invalid crc value
[   47.337768][ T1761] loop2: detected capacity change from 0 to 40427
[   47.349911][ T1761] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   47.350672][ T1754] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   47.370644][ T1761] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   47.398652][ T1761] F2FS-fs (loop2): invalid crc value
[   47.421261][ T1754] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   47.429595][ T1754] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   47.438241][ T1761] F2FS-fs (loop2): Found nat_bits in checkpoint
[   47.470168][ T1754] syz.1.594: attempt to access beyond end of device
[   47.470168][ T1754] loop1: rw=2049, sector=53248, nr_sectors = 96 limit=40427
[   47.519448][ T1754] syz.1.594: attempt to access beyond end of device
[   47.519448][ T1754] loop1: rw=2049, sector=53344, nr_sectors = 128 limit=40427
[   47.532503][   T28] audit: type=1400 audit(1753398688.252:291): avc:  denied  { append } for  pid=1792 comm="syz.3.616" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   47.560302][   T28] audit: type=1400 audit(1753398688.262:292): avc:  denied  { append } for  pid=1794 comm="syz.0.618" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   47.584224][  T285] syz-executor: attempt to access beyond end of device
[   47.584224][  T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   47.608863][ T1761] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   47.619368][ T1761] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   47.739649][   T28] audit: type=1400 audit(1753398688.462:293): avc:  denied  { setattr } for  pid=1760 comm="syz.2.605" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   47.982821][ T1822] incfs: Options parsing error. -22
[   48.003321][ T1822] incfs: mount failed -22
[   48.041113][ T1833] loop4: detected capacity change from 0 to 512
[   48.062099][ T1835] loop0: detected capacity change from 0 to 1024
[   48.086452][ T1833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   48.142764][ T1835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   48.147948][ T1810] loop1: detected capacity change from 0 to 40427
[   48.151397][ T1835] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.178483][  T286] EXT4-fs (loop4): unmounting filesystem.
[   48.185819][ T1835] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.636: lblock 3 mapped to illegal pblock 3 (length 3)
[   48.200118][ T1810] F2FS-fs (loop1): fault_injection options not supported
[   48.208026][ T1810] F2FS-fs (loop1): invalid crc value
[   48.213451][ T1835] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   48.226216][ T1835] EXT4-fs (loop0): This should not happen!! Data will be lost
[   48.226216][ T1835] 
[   48.247080][ T1810] F2FS-fs (loop1): Found nat_bits in checkpoint
[   48.283776][ T1835] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm syz.0.636: lblock 8 mapped to illegal pblock 8 (length 8)
[   48.330350][ T1810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   48.338117][ T1835] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   48.353210][ T1835] EXT4-fs (loop0): This should not happen!! Data will be lost
[   48.353210][ T1835] 
[   48.414095][ T1394] EXT4-fs (loop0): unmounting filesystem.
[   48.447621][ T1858] loop4: detected capacity change from 0 to 1024
[   48.452380][   T28] audit: type=1326 audit(1753398689.172:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b598e9a9 code=0x7ffc0000
[   48.479663][ T1858] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   48.498444][ T1810] syz.1.619: attempt to access beyond end of device
[   48.498444][ T1810] loop1: rw=2049, sector=77824, nr_sectors = 800 limit=40427
[   48.523762][   T28] audit: type=1326 audit(1753398689.202:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f98b598e9a9 code=0x7ffc0000
[   48.548562][ T1858] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   48.557314][  T285] syz-executor: attempt to access beyond end of device
[   48.557314][  T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   48.584745][ T1858] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   48.629200][ T1858] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[   48.661926][ T1858] EXT4-fs (loop4): This should not happen!! Data will be lost
[   48.661926][ T1858] 
[   48.692019][ T1858] EXT4-fs (loop4): Total free blocks count 0
[   48.703169][ T1858] EXT4-fs (loop4): Free/Dirty block details
[   48.709131][ T1858] EXT4-fs (loop4): free_blocks=20480
[   48.714584][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   48.724997][ T1858] EXT4-fs (loop4): dirty_blocks=32
[   48.730472][ T1858] EXT4-fs (loop4): Block reservation details
[   48.740382][ T1858] EXT4-fs (loop4): i_reserved_data_blocks=2
[   48.767064][ T1869] loop3: detected capacity change from 0 to 512
[   48.775910][   T10] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   48.792968][   T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   48.902995][   T24] usb 1-1: Using ep0 maxpacket: 16
[   48.914247][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.941086][ T1896] device lo entered promiscuous mode
[   48.954064][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.964370][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   48.993368][   T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   49.002429][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.013058][   T19] usb 3-1: Using ep0 maxpacket: 16
[   49.019576][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.026513][   T24] usb 1-1: config 0 descriptor??
[   49.046531][   T19] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00
[   49.056123][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.083264][   T19] usb 3-1: config 0 descriptor??
[   49.176329][ T1907] SELinux: failed to load policy
[   49.217986][ T1916] sch_fq: defrate 6 ignored.
[   49.239579][ T1920] loop1: detected capacity change from 0 to 256
[   49.441411][ T1932] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.450702][   T24] microsoft 0003:045E:07DA.0006: unbalanced collection at end of report description
[   49.460774][   T24] microsoft 0003:045E:07DA.0006: parse failed
[   49.467271][   T24] microsoft: probe of 0003:045E:07DA.0006 failed with error -22
[   49.490831][   T19] apple 0003:05AC:023F.0007: unknown main item tag 0xd
[   49.497778][   T19] apple 0003:05AC:023F.0007: unexpected long global item
[   49.497934][ T1936] input: syz1 as /devices/virtual/input/input4
[   49.505321][   T19] apple 0003:05AC:023F.0007: parse failed
[   49.518147][   T19] apple: probe of 0003:05AC:023F.0007 failed with error -22
[   49.601942][ T1945] IPv6: sit1: Disabled Multicast RS
[   49.660249][   T39] usb 1-1: USB disconnect, device number 4
[   49.703032][  T306] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   49.707174][   T19] usb 3-1: USB disconnect, device number 5
[   49.729033][ T1953] loop1: detected capacity change from 0 to 512
[   49.747429][ T1953] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   49.760789][ T1953] EXT4-fs (loop1): 1 truncate cleaned up
[   49.768296][ T1953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   49.786663][  T285] EXT4-fs (loop1): unmounting filesystem.
[   49.884049][  T306] usb 4-1: config 0 has no interfaces?
[   49.890747][  T306] usb 4-1: New USB device found, idVendor=14aa, idProduct=2101, bcdDevice= f.79
[   49.899983][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.908035][  T306] usb 4-1: Product: syz
[   49.912320][  T306] usb 4-1: Manufacturer: syz
[   49.917103][  T306] usb 4-1: SerialNumber: syz
[   49.923903][  T306] usb 4-1: config 0 descriptor??
[   50.123052][    T6] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   50.131675][  T306] usb 4-1: USB disconnect, device number 5
[   50.163058][ T1984] loop4: detected capacity change from 0 to 1024
[   50.171023][ T1984] EXT4-fs: Ignoring removed nomblk_io_submit option
[   50.184766][ T1984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   50.219092][  T286] EXT4-fs (loop4): unmounting filesystem.
[   50.235692][ T1996] device erspan0 entered promiscuous mode
[   50.307163][ T2011] loop0: detected capacity change from 0 to 2048
[   50.317944][    T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   50.323096][ T2011] EXT4-fs: Ignoring removed mblk_io_submit option
[   50.349400][    T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   50.363805][ T2011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   50.377308][ T2011] EXT4-fs (loop0): Online defrag not supported with bigalloc
[   50.385488][    T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   50.400114][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   50.408311][    T6] usb 2-1: SerialNumber: syz
[   50.408660][ T1394] EXT4-fs (loop0): unmounting filesystem.
[   50.419960][    T6] usb 2-1: bad CDC descriptors
[   50.425233][    T6] usb-storage 2-1:1.0: USB Mass Storage device detected
[   50.436206][    T6] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   50.454285][    T6] scsi host1: usb-storage 2-1:1.0
[   50.545007][ T2036] loop2: detected capacity change from 0 to 256
[   50.562075][ T2036] FAT-fs (loop2): Directory bread(block 64) failed
[   50.568949][ T2036] FAT-fs (loop2): Directory bread(block 65) failed
[   50.576141][ T2036] FAT-fs (loop2): Directory bread(block 66) failed
[   50.582722][ T2036] FAT-fs (loop2): Directory bread(block 67) failed
[   50.589324][ T2036] FAT-fs (loop2): Directory bread(block 68) failed
[   50.595948][ T2036] FAT-fs (loop2): Directory bread(block 69) failed
[   50.602516][ T2036] FAT-fs (loop2): Directory bread(block 70) failed
[   50.602997][   T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   50.609157][ T2036] FAT-fs (loop2): Directory bread(block 71) failed
[   50.623182][ T2036] FAT-fs (loop2): Directory bread(block 72) failed
[   50.629708][ T2036] FAT-fs (loop2): Directory bread(block 73) failed
[   50.716002][ T2032] loop0: detected capacity change from 0 to 40427
[   50.722624][ T2042] loop3: detected capacity change from 0 to 512
[   50.726428][ T2032] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   50.737125][ T2032] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   50.766897][ T2032] F2FS-fs (loop0): invalid crc value
[   50.766983][ T2045] loop2: detected capacity change from 0 to 512
[   50.786413][ T2032] F2FS-fs (loop0): Found nat_bits in checkpoint
[   50.799203][ T2045] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   50.810098][ T2042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   50.819241][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.835876][   T39] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   50.840202][ T2042] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.846645][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.873829][   T43] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   50.887813][ T2032] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   50.888357][   T39] usb 5-1: config 0 descriptor??
[   50.900182][ T2032] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   51.181237][  T284] EXT4-fs (loop3): unmounting filesystem.
[   51.263726][ T2079] loop0: detected capacity change from 0 to 512
[   51.286022][ T2079] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.286135][   T28] kauditd_printk_skb: 1249 callbacks suppressed
[   51.286147][   T28] audit: type=1400 audit(1753398692.012:1545): avc:  denied  { listen } for  pid=2082 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.308904][ T2079] Quota error (device loop0): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[   51.323689][   T39] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[   51.332900][ T2079] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   51.353691][ T2079] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.738: Failed to acquire dquot type 0
[   51.354406][   T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input5
[   51.365177][   T28] audit: type=1400 audit(1753398692.032:1546): avc:  denied  { read } for  pid=2078 comm="syz.0.738" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   51.398710][   T28] audit: type=1400 audit(1753398692.032:1547): avc:  denied  { rename } for  pid=2078 comm="syz.0.738" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   51.421124][   T28] audit: type=1400 audit(1753398692.032:1548): avc:  denied  { unlink } for  pid=2078 comm="syz.0.738" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   51.443714][   T28] audit: type=1400 audit(1753398692.062:1549): avc:  denied  { accept } for  pid=2082 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.470933][ T2087] netlink: 124 bytes leftover after parsing attributes in process `syz.2.742'.
[   51.488368][   T39] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[   51.491231][ T2089] netlink: 60 bytes leftover after parsing attributes in process `syz.0.743'.
[   51.563009][ T2094] loop0: detected capacity change from 0 to 128
[   51.811692][ T2102] loop0: detected capacity change from 0 to 256
[   51.834069][ T2102] FAT-fs (loop0): Directory bread(block 64) failed
[   51.840668][ T2102] FAT-fs (loop0): Directory bread(block 65) failed
[   51.847738][ T2102] FAT-fs (loop0): Directory bread(block 66) failed
[   51.854723][ T2102] FAT-fs (loop0): Directory bread(block 67) failed
[   51.861273][ T2102] FAT-fs (loop0): Directory bread(block 68) failed
[   51.868110][ T2102] FAT-fs (loop0): Directory bread(block 69) failed
[   51.875814][ T2102] FAT-fs (loop0): Directory bread(block 70) failed
[   51.882391][ T2102] FAT-fs (loop0): Directory bread(block 71) failed
[   51.889195][ T2102] FAT-fs (loop0): Directory bread(block 72) failed
[   51.895935][ T2102] FAT-fs (loop0): Directory bread(block 73) failed
[   51.935742][   T24] usb 5-1: USB disconnect, device number 4
[   51.998150][   T28] audit: type=1400 audit(1753398692.722:1550): avc:  denied  { ioctl } for  pid=2105 comm="syz.0.752" path="socket:[23817]" dev="sockfs" ino=23817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   51.998913][ T2106] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.152165][ T2118] loop0: detected capacity change from 0 to 128
[   52.160161][ T2120] syzkaller1: tun_chr_ioctl cmd 1074025677
[   52.160796][ T2118] EXT4-fs: Ignoring removed nobh option
[   52.166355][ T2120] syzkaller1: linktype set to 768
[   52.182328][ T2118] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   52.261357][ T2136] binder: 2133:2136 ioctl c018620c 200000000000 returned -1
[   52.311102][ T2144] loop0: detected capacity change from 0 to 1024
[   52.322808][ T2144] EXT4-fs: Ignoring removed i_version option
[   52.346398][ T2144] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.767: lblock 2 mapped to illegal pblock 2 (length 1)
[   52.369197][ T2144] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   52.377536][ T2144] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.767: lblock 0 mapped to illegal pblock 48 (length 1)
[   52.392147][ T2144] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   52.401142][ T2144] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.767: Failed to acquire dquot type 0
[   52.412758][ T2144] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Corrupt filesystem
[   52.422449][ T2144] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.767: mark_inode_dirty error
[   52.433991][ T2144] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   52.444688][ T2144] EXT4-fs (loop0): 1 orphan inode deleted
[   52.458034][ T2153] loop1: detected capacity change from 0 to 128
[   52.458148][ T2149] loop2: detected capacity change from 0 to 32768
[   52.464448][   T43] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[   52.476699][ T2153] FAT-fs (loop1): Unrecognized mount option "18446744073709551615����������" or missing value
[   52.506426][ T2144] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 16: comm syz.0.767: lblock 0 mapped to illegal pblock 16 (length 1)
[   52.508559][   T43] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 0
[   52.539169][ T2149]  loop2: p1 p2 p3 < p5 p6 p7 >
[   52.554474][ T2149] loop2: p2 size 16775168 extends beyond EOD, truncated
[   52.564414][   T39] usb 2-1: USB disconnect, device number 3
[   52.580121][ T2149] loop2: p5 start 4294970168 is beyond EOD, truncated
[   52.588672][ T1394] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[   52.591583][ T2162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.775'.
[   52.602163][ T1394] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Corrupt filesystem
[   52.627177][ T1394] EXT4-fs error (device loop0): ext4_quota_off:7107: inode #3: comm syz-executor: mark_inode_dirty error
[   52.689219][ T2173] loop4: detected capacity change from 0 to 256
[   52.723657][ T2173] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   52.741382][  T383] udevd[383]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   52.742207][ T1057] udevd[1057]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   52.753288][  T382] udevd[382]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   52.772563][  T340] udevd[340]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[   52.787550][ T2183] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   52.792390][  T308] udevd[308]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   52.933002][  T306] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   52.951484][ T2201] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[   52.971648][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[   53.091003][ T2199] loop1: detected capacity change from 0 to 40427
[   53.103267][ T2199] F2FS-fs (loop1): fault_injection options not supported
[   53.113259][ T2191] loop2: detected capacity change from 0 to 40427
[   53.119645][ T2199] F2FS-fs (loop1): invalid crc value
[   53.124379][ T2191] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   53.126398][  T306] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   53.133687][ T2191] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   53.144794][  T306] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   53.165077][ T2199] F2FS-fs (loop1): Found nat_bits in checkpoint
[   53.189388][ T2191] F2FS-fs (loop2): Found nat_bits in checkpoint
[   53.195622][  T306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   53.226943][  T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   53.238290][ T2191] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   53.245683][  T306] usb 1-1: SerialNumber: syz
[   53.253175][ T2191] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   53.284483][  T306] usb 1-1: bad CDC descriptors
[   53.289442][  T306] usb-storage 1-1:1.0: USB Mass Storage device detected
[   53.297030][ T2199] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   53.324448][  T306] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   53.341397][ T2234] netlink: 176 bytes leftover after parsing attributes in process `syz.3.804'.
[   53.353183][  T306] scsi host1: usb-storage 1-1:1.0
[   53.417432][  T285] syz-executor: attempt to access beyond end of device
[   53.417432][  T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   53.566817][ T2251] futex_wake_op: syz.3.811 tries to shift op by 32; fix this program
[   53.624543][ T2261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'.
[   53.633570][ T2261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'.
[   53.644004][ T2261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'.
[   53.729036][ T2245] loop2: detected capacity change from 0 to 40427
[   53.746591][ T2245] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   53.763087][ T2245] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   53.772286][ T2245] F2FS-fs (loop2): invalid crc value
[   53.812653][ T2245] F2FS-fs (loop2): Found nat_bits in checkpoint
[   53.818546][ T2257] loop1: detected capacity change from 0 to 40427
[   53.837071][ T2257] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   53.852995][ T2257] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   53.871562][ T2257] F2FS-fs (loop1): invalid crc_offset: 33558524
[   53.874591][ T2245] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   53.886169][ T2245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   53.911714][ T2257] F2FS-fs (loop1): Found nat_bits in checkpoint
[   53.959559][ T2257] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   53.968935][ T2257] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   54.017395][ T2257] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[   54.040536][ T2257] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[   54.181898][ T2280] syzkaller0: tun_chr_ioctl cmd 1074025675
[   54.187937][ T2280] syzkaller0: persist disabled
[   54.439017][ T2299] loop1: detected capacity change from 0 to 1024
[   54.582431][ T2312] loop1: detected capacity change from 0 to 1024
[   54.613776][ T2312] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.676059][ T2303] loop2: detected capacity change from 0 to 40427
[   54.684818][ T2303] F2FS-fs (loop2): invalid crc value
[   54.691184][ T2303] F2FS-fs (loop2): Found nat_bits in checkpoint
[   54.720242][ T2326] loop1: detected capacity change from 0 to 512
[   54.732063][ T2326] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.839: iget: bad extended attribute block 1
[   54.737997][ T2303] F2FS-fs (loop2): Start checkpoint disabled!
[   54.745455][ T2326] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.839: couldn't read orphan inode 15 (err -117)
[   54.751528][ T2303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   54.814674][  T375] kworker/u4:5: attempt to access beyond end of device
[   54.814674][  T375] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   54.962996][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   54.967870][ T2347] loop2: detected capacity change from 0 to 2048
[   54.991457][  T375] Bluetooth: hci0: Frame reassembly failed (-84)
[   55.044404][ T2347]  loop2: p1 < > p3
[   55.049264][ T2347] loop2: p3 size 134217728 extends beyond EOD, truncated
[   55.083414][ T2354] loop1: detected capacity change from 0 to 1024
[   55.121955][ T2354] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.849: reserved inode found cleared - inode=2
[   55.177228][ T2367] loop2: detected capacity change from 0 to 128
[   55.215424][ T2371] loop0: detected capacity change from 0 to 2048
[   55.234140][ T2371] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.423281][  T305] usb 1-1: USB disconnect, device number 5
[   55.440344][ T2392] loop0: detected capacity change from 0 to 512
[   55.451007][ T2392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.476976][ T2392] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.627542][ T2392] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   55.642706][ T2392] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   55.655461][ T2392] EXT4-fs (loop0): This should not happen!! Data will be lost
[   55.655461][ T2392] 
[   55.665159][ T2392] EXT4-fs (loop0): Total free blocks count 0
[   55.671262][ T2392] EXT4-fs (loop0): Free/Dirty block details
[   55.677246][ T2392] EXT4-fs (loop0): free_blocks=39626
[   55.683443][ T2392] EXT4-fs (loop0): dirty_blocks=4095
[   55.689344][ T2392] EXT4-fs (loop0): Block reservation details
[   55.695600][ T2392] EXT4-fs (loop0): i_reserved_data_blocks=4095
[   55.713107][  T306] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   55.725051][   T43] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28
[   55.738571][   T43] EXT4-fs (loop0): This should not happen!! Data will be lost
[   55.738571][   T43] 
[   55.796420][ T2413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.875'.
[   55.805933][ T2413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.875'.
[   55.893999][  T306] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   55.905024][  T306] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   55.915507][  T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   55.924934][  T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   55.933144][  T306] usb 3-1: SerialNumber: syz
[   55.939233][  T306] usb 3-1: bad CDC descriptors
[   55.944292][  T306] usb-storage 3-1:1.0: USB Mass Storage device detected
[   55.952285][  T306] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   55.960301][  T306] scsi host1: usb-storage 3-1:1.0
[   56.073599][ T2432] netlink: 76 bytes leftover after parsing attributes in process `syz.1.882'.
[   56.216157][ T2447] loop0: detected capacity change from 0 to 128
[   56.228461][ T2447] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   56.236510][ T2447] FAT-fs (loop0): Filesystem has been set read-only
[   56.243415][ T2447] syz.0.889: attempt to access beyond end of device
[   56.243415][ T2447] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   56.257477][ T2447] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   56.265408][ T2447] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   56.273455][ T2447] syz.0.889: attempt to access beyond end of device
[   56.273455][ T2447] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   56.287272][ T2447] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   56.295256][ T2447] syz.0.889: attempt to access beyond end of device
[   56.295256][ T2447] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   56.309562][ T2447] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   56.317624][ T2447] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   56.326279][ T2447] syz.0.889: attempt to access beyond end of device
[   56.326279][ T2447] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   56.340530][ T2448] syz.0.889: attempt to access beyond end of device
[   56.340530][ T2448] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   56.353967][ T2447] syz.0.889: attempt to access beyond end of device
[   56.353967][ T2447] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   56.367296][ T2447] syz.0.889: attempt to access beyond end of device
[   56.367296][ T2447] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   56.381012][ T2447] syz.0.889: attempt to access beyond end of device
[   56.381012][ T2447] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   56.394624][ T2447] syz.0.889: attempt to access beyond end of device
[   56.394624][ T2447] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   56.407859][  T305] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   56.456243][ T2450] syz.3.890[2450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.456332][ T2450] syz.3.890[2450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.609573][  T305] usb 2-1: Using ep0 maxpacket: 32
[   56.636969][  T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.663794][  T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.685252][  T305] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   56.694580][  T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.717811][  T305] usb 2-1: config 0 descriptor??
[   56.731666][  T305] hub 2-1:0.0: USB hub found
[   56.925718][  T305] hub 2-1:0.0: config failed, hub has too many ports! (err -19)
[   57.022988][  T306] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   57.052988][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   57.128357][   T28] kauditd_printk_skb: 14 callbacks suppressed
[   57.128371][   T28] audit: type=1400 audit(1753398698.843:1564): avc:  denied  { connect } for  pid=2481 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   57.149260][ T2484] loop0: detected capacity change from 0 to 256
[   57.163332][ T2484] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152)
[   57.202976][  T306] usb 4-1: Using ep0 maxpacket: 32
[   57.209379][  T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.222997][  T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.233059][  T306] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   57.242280][  T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.261126][  T306] usb 4-1: config 0 descriptor??
[   57.271923][  T306] hub 4-1:0.0: USB hub found
[   57.336861][  T305] usbhid 2-1:0.0: can't add hid device: -71
[   57.342988][  T305] usbhid: probe of 2-1:0.0 failed with error -71
[   57.383741][    T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   57.391900][  T305] usb 2-1: USB disconnect, device number 4
[   57.472381][  T306] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   57.584175][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.595321][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.605928][    T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   57.618766][    T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   57.627837][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.636918][    T6] usb 5-1: config 0 descriptor??
[   57.674711][  T306] usbhid 4-1:0.0: can't add hid device: -71
[   57.680682][  T306] usbhid: probe of 4-1:0.0 failed with error -71
[   57.713671][  T306] usb 4-1: USB disconnect, device number 6
[   57.783234][ T2505] loop2: detected capacity change from 0 to 128
[   57.800943][ T2505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   57.809166][ T2505] FAT-fs (loop2): Filesystem has been set read-only
[   57.816025][ T2505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   57.824084][ T2505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   57.896922][ T2516] netlink: 'syz.1.919': attribute type 3 has an invalid length.
[   58.003865][ T2528] syz.0.926 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   58.006040][ T2530] loop1: detected capacity change from 0 to 512
[   58.036953][ T2530] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.048276][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.060769][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.071629][ T2530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'.
[   58.083305][   T19] usb 3-1: USB disconnect, device number 6
[   58.093490][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.100893][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.118377][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.121009][   T28] audit: type=1400 audit(1753398699.833:1565): avc:  denied  { read } for  pid=2535 comm="syz.0.930" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.149362][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.158834][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.174678][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.179616][   T28] audit: type=1400 audit(1753398699.863:1566): avc:  denied  { ioctl } for  pid=2535 comm="syz.0.930" path="/108/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.183735][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.246572][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.260102][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.267656][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.276474][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.288324][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.296273][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.303708][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.311131][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.318563][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.326172][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.333671][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.341094][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.348606][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.356042][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.363470][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.370886][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.378304][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.385796][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.393218][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.400640][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.408050][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.415477][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.422864][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.430338][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.437933][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.445384][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.452779][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.460238][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.467649][    T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   58.475269][    T6] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[   58.493053][   T28] audit: type=1400 audit(1753398700.203:1567): avc:  denied  { bpf } for  pid=2545 comm="syz.3.934" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   58.519148][    T6] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   58.540430][   T28] audit: type=1400 audit(1753398700.213:1568): avc:  denied  { read write } for  pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.566064][    T6] usb 5-1: USB disconnect, device number 5
[   58.650732][ T2551] fido_id[2551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   58.667356][   T28] audit: type=1400 audit(1753398700.213:1569): avc:  denied  { open } for  pid=285 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.733072][   T28] audit: type=1400 audit(1753398700.213:1570): avc:  denied  { ioctl } for  pid=285 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.775870][   T28] audit: type=1400 audit(1753398700.283:1571): avc:  denied  { map_create } for  pid=2547 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   58.795180][   T28] audit: type=1400 audit(1753398700.283:1572): avc:  denied  { perfmon } for  pid=2547 comm="syz.1.935" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   58.825778][   T28] audit: type=1400 audit(1753398700.283:1573): avc:  denied  { map_read map_write } for  pid=2547 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   58.898228][ T2574] loop3: detected capacity change from 0 to 512
[   58.908024][ T2574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   58.931104][ T2574] EXT4-fs (loop3): 1 truncate cleaned up
[   59.022760][ T2587] loop4: detected capacity change from 0 to 1024
[   59.031254][ T2587] EXT4-fs: Ignoring removed orlov option
[   59.032759][ T2583] loop3: detected capacity change from 0 to 512
[   59.037240][ T2587] EXT4-fs: Ignoring removed nomblk_io_submit option
[   59.066117][ T2583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   59.089725][ T2583] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.951: invalid block
[   59.112829][ T2583] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.951: invalid indirect mapped block 4294967295 (level 1)
[   59.129449][ T2583] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.951: invalid indirect mapped block 4294967295 (level 1)
[   59.145562][ T2583] EXT4-fs (loop3): 2 truncates cleaned up
[   59.174830][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   59.179325][ T2599] loop4: detected capacity change from 0 to 4096
[   59.191406][ T2599] EXT4-fs (loop4): Test dummy encryption mode enabled
[   59.275728][ T2609] loop4: detected capacity change from 0 to 1024
[   59.285191][ T2609] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   59.373040][   T24] usb 3-1: Using ep0 maxpacket: 32
[   59.379437][   T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   59.383358][ T2622] loop1: detected capacity change from 0 to 1024
[   59.397259][   T24] usb 3-1: config 0 has no interface number 0
[   59.410041][   T24] usb 3-1: config 0 interface 184 has no altsetting 0
[   59.414104][ T2622] EXT4-fs: Ignoring removed bh option
[   59.429003][   T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   59.446951][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.466923][   T24] usb 3-1: Product: syz
[   59.471917][   T24] usb 3-1: Manufacturer: syz
[   59.475650][ T2622] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.967: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   59.495961][   T24] usb 3-1: SerialNumber: syz
[   59.501226][ T2622] EXT4-fs (loop1): Remounting filesystem read-only
[   59.502017][   T24] usb 3-1: config 0 descriptor??
[   59.514092][   T24] smsc75xx v1.0.0
[   59.521885][ T2622] syz.1.967 (2622) used greatest stack depth: 20608 bytes left
[   59.530052][  T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /236/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   59.552812][  T285] EXT4-fs (loop1): Remounting filesystem read-only
[   59.560005][  T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /236/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   59.582476][  T285] EXT4-fs (loop1): Remounting filesystem read-only
[   59.589234][   T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   59.589509][  T285] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   59.616773][  T285] EXT4-fs (loop1): Remounting filesystem read-only
[   59.623353][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   59.637681][  T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /236/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   59.659965][  T285] EXT4-fs (loop1): Remounting filesystem read-only
[   59.666564][  T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /236/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   59.691551][  T285] EXT4-fs (loop1): Remounting filesystem read-only
[   59.698210][  T285] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   59.719597][  T285] EXT4-fs (loop1): Remounting filesystem read-only
[   59.729834][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   59.744340][  T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /236/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   59.767054][  T285] EXT4-fs (loop1): Remounting filesystem read-only
[   59.773624][   T39] usb 5-1: Using ep0 maxpacket: 16
[   59.778874][  T285] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /236/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   59.801380][  T285] EXT4-fs (loop1): Remounting filesystem read-only
[   59.808390][  T285] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   59.828688][   T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[   59.838725][  T285] EXT4-fs (loop1): Remounting filesystem read-only
[   59.842877][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.853698][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   59.858590][   T39] usb 5-1: config 0 descriptor??
[   59.868776][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   59.888284][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   59.904084][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   59.919279][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   59.934610][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   59.951075][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   59.967689][  T285] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   60.134224][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   60.145153][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   60.229656][ T2643] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.237389][ T2643] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.244956][ T2643] device bridge_slave_0 entered promiscuous mode
[   60.251881][ T2643] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.259058][ T2643] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.266538][ T2643] device bridge_slave_1 entered promiscuous mode
[   60.304773][   T39] koneplus 0003:1E7D:2E22.000A: unknown global tag 0xd
[   60.311712][   T39] koneplus 0003:1E7D:2E22.000A: item 0 1 1 13 parsing failed
[   60.319398][   T39] koneplus 0003:1E7D:2E22.000A: parse failed
[   60.325438][   T39] koneplus: probe of 0003:1E7D:2E22.000A failed with error -22
[   60.350670][ T2643] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.357755][ T2643] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.361275][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   60.365060][ T2643] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.382794][ T2643] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.383095][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   60.402138][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   60.412809][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   60.416564][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.429810][   T24] smsc75xx: probe of 3-1:0.184 failed with error -71
[   60.436921][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.449581][   T24] usb 3-1: USB disconnect, device number 7
[   60.456055][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.471988][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.480377][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.487410][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.494893][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.503249][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.510299][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.511591][    T6] usb 5-1: USB disconnect, device number 6
[   60.534980][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.543299][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.564484][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.577627][ T2643] device veth0_vlan entered promiscuous mode
[   60.584157][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.592829][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.600451][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.617688][ T2643] device veth1_macvtap entered promiscuous mode
[   60.624899][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.646360][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.657615][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.743714][   T10] device bridge_slave_1 left promiscuous mode
[   60.750906][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.778781][   T10] device veth1_macvtap left promiscuous mode
[   60.787729][   T10] device veth0_vlan left promiscuous mode
[   60.795990][ T2678] input: syz1 as /devices/virtual/input/input7
[   60.828779][ T2678] input: failed to attach handler leds to device input7, error: -6
[   61.067495][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   61.117293][ T2730] syz.2.1018[2730] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   61.117366][ T2730] syz.2.1018[2730] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   61.137667][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   61.159206][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.173531][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   61.182035][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.208231][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.225719][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.235626][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.254082][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.272843][ T2742] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   61.295205][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[   61.389261][ T2770] loop5: detected capacity change from 0 to 512
[   61.412502][ T2770] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1037: iget: bad extended attribute block 1
[   61.426422][ T2770] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1037: couldn't read orphan inode 15 (err -117)
[   62.043761][ T2808] device ip6gretap0 entered promiscuous mode
[   62.050230][ T2808] device macsec1 entered promiscuous mode
[   62.209680][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   62.221884][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   62.230842][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.239115][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   62.247627][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.256085][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.264389][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.272582][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.280777][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.389946][   T28] kauditd_printk_skb: 154 callbacks suppressed
[   62.389961][   T28] audit: type=1400 audit(1753398704.103:1728): avc:  denied  { unmount } for  pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   62.416819][   T28] audit: type=1326 audit(1753398704.123:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2820 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879dd8e9a9 code=0x7ffc0000
[   62.440737][   T28] audit: type=1326 audit(1753398704.123:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2820 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f879dd8e9a9 code=0x7ffc0000
[   62.465079][   T28] audit: type=1326 audit(1753398704.123:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2820 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879dd8e9a9 code=0x7ffc0000
[   62.489524][   T28] audit: type=1326 audit(1753398704.123:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2820 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f879dd8e9a9 code=0x7ffc0000
[   62.513971][   T28] audit: type=1326 audit(1753398704.123:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2820 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879dd8e9a9 code=0x7ffc0000
[   62.538190][   T28] audit: type=1326 audit(1753398704.123:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2820 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f879dd8e9a9 code=0x7ffc0000
[   62.580380][   T28] audit: type=1326 audit(1753398704.163:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2820 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879dd8e9a9 code=0x7ffc0000
[   62.605563][   T28] audit: type=1326 audit(1753398704.163:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2820 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f879dd8e9a9 code=0x7ffc0000
[   62.632024][   T28] audit: type=1326 audit(1753398704.163:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2820 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879dd8e9a9 code=0x7ffc0000
[   62.634556][ T2840] input: syz1 as /devices/virtual/input/input8
[   62.661814][ T2840] input: failed to attach handler leds to device input8, error: -6
[   62.846465][ T2872] loop5: detected capacity change from 0 to 256
[   62.873161][  T306] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   62.955172][ T2888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'.
[   63.008262][ T2896] futex_wake_op: syz.5.1095 tries to shift op by 32; fix this program
[   63.045802][ T2902] device bridge0 entered promiscuous mode
[   63.051864][ T2901] device bridge0 left promiscuous mode
[   63.058586][  T306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.082579][  T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   63.092254][  T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.094529][ T2908] loop5: detected capacity change from 0 to 512
[   63.100827][  T306] usb 5-1: Product: syz
[   63.114011][ T2908] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   63.124073][  T306] usb 5-1: Manufacturer: syz
[   63.128761][  T306] usb 5-1: SerialNumber: syz
[   63.138996][ T2908] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   63.141545][ T2910] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1102'.
[   63.159758][ T2908] EXT4-fs (loop5): 1 truncate cleaned up
[   63.249001][ T2920] loop5: detected capacity change from 0 to 128
[   63.363684][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   63.369743][ T2202] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   63.465125][ T2941] 9pnet: p9_errstr2errno: server reported unknown error �@c�F	S
[   63.859476][  T331] Bluetooth: hci0: Frame reassembly failed (-84)
[   63.916059][ T3004] netlink: 'syz.5.1145': attribute type 1 has an invalid length.
[   63.924242][ T3004] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1145'.
[   63.984259][ T3020] loop5: detected capacity change from 0 to 256
[   63.996210][ T3020] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[   64.012654][ T3019] exFAT-fs (loop5): invalid start cluster (520)
[   64.037192][ T3024] input: syz1 as /devices/virtual/input/input9
[   64.144273][  T306] cdc_ncm 5-1:1.0: bind() failure
[   64.150993][  T306] usb 5-1: USB disconnect, device number 7
[   64.383015][   T19] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   64.449239][ T3037] netlink: 'syz.2.1161': attribute type 280 has an invalid length.
[   64.498970][ T3049] netlink: 'syz.2.1167': attribute type 5 has an invalid length.
[   64.538326][ T3055] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.545524][ T3055] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.564143][   T19] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[   64.574861][   T19] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   64.584071][   T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.594006][   T19] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1
[   64.665322][ T3063] loop4: detected capacity change from 0 to 512
[   64.675968][ T3063] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1174: casefold flag without casefold feature
[   64.688929][ T3063] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1174: couldn't read orphan inode 15 (err -117)
[   64.701056][ T3063] EXT4-fs mount: 34 callbacks suppressed
[   64.701073][ T3063] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   64.721649][ T3069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'.
[   64.797442][   T19] usb 6-1: USB disconnect, device number 2
[   64.818651][  T286] EXT4-fs (loop4): unmounting filesystem.
[   64.877889][ T3094] device bridge3 entered promiscuous mode
[   65.187295][ T3137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3137 comm=syz.4.1207
[   65.205689][ T3137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1207'.
[   65.279723][ T3145] overlayfs: failed to resolve './bus': -2
[   65.315231][ T3147] loop3: detected capacity change from 0 to 256
[   65.333336][ T3147] FAT-fs (loop3): Directory bread(block 64) failed
[   65.349574][ T3147] FAT-fs (loop3): Directory bread(block 65) failed
[   65.358142][ T3147] FAT-fs (loop3): Directory bread(block 66) failed
[   65.365230][ T3147] FAT-fs (loop3): Directory bread(block 67) failed
[   65.372663][ T3147] FAT-fs (loop3): Directory bread(block 68) failed
[   65.385657][ T3147] FAT-fs (loop3): Directory bread(block 69) failed
[   65.392427][ T3147] FAT-fs (loop3): Directory bread(block 70) failed
[   65.399695][ T3147] FAT-fs (loop3): Directory bread(block 71) failed
[   65.409266][ T3147] FAT-fs (loop3): Directory bread(block 72) failed
[   65.416949][ T3147] FAT-fs (loop3): Directory bread(block 73) failed
[   65.433496][ T3147] bio_check_eod: 91178 callbacks suppressed
[   65.433511][ T3147] syz.3.1214: attempt to access beyond end of device
[   65.433511][ T3147] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256
[   65.660241][ T3179] loop5: detected capacity change from 0 to 40427
[   65.670158][ T3179] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   65.678149][ T3179] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   65.690240][ T3179] F2FS-fs (loop5): invalid crc value
[   65.697939][ T3179] F2FS-fs (loop5): Found nat_bits in checkpoint
[   65.720505][ T3179] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   65.727836][ T3179] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   65.923221][ T2203] Bluetooth: hci0: command 0x1003 tx timeout
[   65.923400][ T2202] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   65.935554][ T2994] Bluetooth: hci0: Opcode 0x080f failed: -22
[   66.462837][ T3243] input: syz1 as /devices/virtual/input/input11
[   66.472128][ T3243] input: failed to attach handler leds to device input11, error: -6
[   66.668388][ T3270] input: syz1 as /devices/virtual/input/input12
[   66.678717][ T3270] input: failed to attach handler leds to device input12, error: -6
[   67.004530][ T3309] loop5: detected capacity change from 0 to 40427
[   67.014253][ T3309] F2FS-fs (loop5): invalid crc value
[   67.020998][ T3309] F2FS-fs (loop5): Found nat_bits in checkpoint
[   67.046440][ T3309] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   67.068512][ T2643] syz-executor: attempt to access beyond end of device
[   67.068512][ T2643] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   67.083328][ T2643] syz-executor: attempt to access beyond end of device
[   67.083328][ T2643] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   67.109963][  T331] kworker/u4:4: attempt to access beyond end of device
[   67.109963][  T331] loop5: rw=2049, sector=40960, nr_sectors = 88 limit=40427
[   67.477108][ T3322] input: syz1 as /devices/virtual/input/input13
[   67.483542][ T3322] input: failed to attach handler leds to device input13, error: -6
[   67.557593][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.564682][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.572002][ T3324] device bridge_slave_0 entered promiscuous mode
[   67.579396][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.586624][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.594120][ T3324] device bridge_slave_1 entered promiscuous mode
[   67.640205][   T28] kauditd_printk_skb: 66 callbacks suppressed
[   67.640218][   T28] audit: type=1400 audit(1753398709.353:1804): avc:  denied  { setopt } for  pid=3338 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.809957][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.818591][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.823670][ T3361] loop3: detected capacity change from 0 to 512
[   67.827689][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.841003][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.849844][  T375] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.856931][  T375] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.864818][ T3361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   67.874338][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.883493][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.885259][ T3361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   67.891965][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.901600][ T3361] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.909739][  T375] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.926254][  T375] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.946178][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.954387][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.962152][   T28] audit: type=1400 audit(1753398709.673:1805): avc:  denied  { write } for  pid=3359 comm="syz.3.1306" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   67.995840][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.007853][ T3324] device veth0_vlan entered promiscuous mode
[   68.015686][   T28] audit: type=1400 audit(1753398709.733:1806): avc:  denied  { setattr } for  pid=3359 comm="syz.3.1306" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   68.039124][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.047595][ T3364] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   68.063592][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.071262][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.084565][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.096656][ T3324] device veth1_macvtap entered promiscuous mode
[   68.120714][ T3361] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   68.133798][ T3361] EXT4-fs (loop3): This should not happen!! Data will be lost
[   68.133798][ T3361] 
[   68.138016][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.143827][ T3361] EXT4-fs (loop3): Total free blocks count 0
[   68.157737][ T3361] EXT4-fs (loop3): Free/Dirty block details
[   68.163900][ T3361] EXT4-fs (loop3): free_blocks=39626
[   68.169218][ T3361] EXT4-fs (loop3): dirty_blocks=4095
[   68.170770][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.175525][ T3361] EXT4-fs (loop3): Block reservation details
[   68.188844][ T3361] EXT4-fs (loop3): i_reserved_data_blocks=4095
[   68.274298][  T331] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28
[   68.424208][ T3389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'.
[   68.472856][   T28] audit: type=1400 audit(1753398710.183:1807): avc:  denied  { getopt } for  pid=3400 comm="syz.2.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   68.505695][   T28] audit: type=1400 audit(1753398710.223:1808): avc:  denied  { ioctl } for  pid=3403 comm="syz.0.1319" path="/185/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   68.532054][   T28] audit: type=1400 audit(1753398710.223:1809): avc:  denied  { getopt } for  pid=3405 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   68.572980][  T306] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   68.763050][  T306] usb 6-1: Using ep0 maxpacket: 16
[   68.769516][  T306] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[   68.779022][  T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.787860][  T306] usb 6-1: config 0 descriptor??
[   69.195497][  T306] koneplus 0003:1E7D:2E22.000B: unknown global tag 0xd
[   69.202364][  T306] koneplus 0003:1E7D:2E22.000B: item 0 1 1 13 parsing failed
[   69.209986][  T306] koneplus 0003:1E7D:2E22.000B: parse failed
[   69.216006][  T306] koneplus: probe of 0003:1E7D:2E22.000B failed with error -22
[   69.399954][  T306] usb 6-1: USB disconnect, device number 3
[   69.985150][ T3435] loop3: detected capacity change from 0 to 128
[   69.999774][ T3437] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1340'.
[   70.018187][ T3435] EXT4-fs (loop3): Test dummy encryption mode enabled
[   70.073275][   T28] audit: type=1400 audit(1753398712.793:1810): avc:  denied  { write } for  pid=3444 comm="syz.0.1343" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   70.073349][ T3435] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   70.125500][ T3435] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   70.171710][ T3435] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   70.189689][   T28] audit: type=1400 audit(1753398712.903:1811): avc:  denied  { block_suspend } for  pid=3457 comm="syz.5.1348" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   70.217128][  T284] EXT4-fs (loop3): unmounting filesystem.
[   70.263273][   T28] audit: type=1400 audit(1753398712.983:1812): avc:  denied  { read write } for  pid=3464 comm="syz.5.1351" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   70.330337][   T28] audit: type=1400 audit(1753398712.983:1813): avc:  denied  { open } for  pid=3464 comm="syz.5.1351" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   70.373306][ T3474] tmpfs: Unknown parameter ''
[   70.408265][   T10] device bridge_slave_1 left promiscuous mode
[   70.421142][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.433434][   T10] device bridge_slave_0 left promiscuous mode
[   70.439898][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.449672][ T3484] loop3: detected capacity change from 0 to 512
[   70.457257][   T10] device veth1_macvtap left promiscuous mode
[   70.464500][   T10] device veth0_vlan left promiscuous mode
[   70.471627][ T3484] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1360: casefold flag without casefold feature
[   70.493058][ T3484] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1360: couldn't read orphan inode 15 (err -117)
[   70.506581][ T3484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   70.521285][ T3488] fuse: Bad value for 'fd'
[   70.538223][  T284] EXT4-fs (loop3): unmounting filesystem.
[   70.563599][ T3492] syz.3.1363[3492] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.563673][ T3492] syz.3.1363[3492] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.603141][ T3494] loop3: detected capacity change from 0 to 1024
[   70.650583][ T3494] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   70.679260][  T284] EXT4-fs (loop3): unmounting filesystem.
[   70.706806][ T3506] loop3: detected capacity change from 0 to 128
[   70.728245][ T3506] FAT-fs (loop3): Directory bread(block 162) failed
[   70.736203][ T3506] FAT-fs (loop3): Directory bread(block 163) failed
[   70.745773][ T3506] FAT-fs (loop3): Directory bread(block 164) failed
[   70.752574][ T3506] FAT-fs (loop3): Directory bread(block 165) failed
[   70.759825][ T3506] FAT-fs (loop3): Directory bread(block 166) failed
[   70.768885][ T3514] loop0: detected capacity change from 0 to 2048
[   70.775164][ T3506] FAT-fs (loop3): Directory bread(block 167) failed
[   70.787377][ T3506] FAT-fs (loop3): Directory bread(block 168) failed
[   70.797056][ T3506] FAT-fs (loop3): Directory bread(block 169) failed
[   70.813838][ T3506] FAT-fs (loop3): Directory bread(block 162) failed
[   70.820563][ T3506] FAT-fs (loop3): Directory bread(block 163) failed
[   70.835785][ T3514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   70.838956][ T3506] syz.3.1368: attempt to access beyond end of device
[   70.838956][ T3506] loop3: rw=3, sector=226, nr_sectors = 6 limit=128
[   70.846915][ T3520] loop5: detected capacity change from 0 to 128
[   70.863948][ T3506] syz.3.1368: attempt to access beyond end of device
[   70.863948][ T3506] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128
[   70.864148][ T3514] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.927639][ T3514] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.1372: corrupted xattr block 128
[   70.943661][ T3514] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   70.955200][ T3514] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.1372: corrupted xattr block 128
[   70.973446][ T3514] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   70.982597][ T3514] EXT4-fs error (device loop0): ext4_xattr_block_find:1837: inode #15: comm syz.0.1372: corrupted xattr block 128
[   71.024893][ T1394] EXT4-fs (loop0): unmounting filesystem.
[   71.116086][ T3540] loop0: detected capacity change from 0 to 512
[   71.154232][ T3542] loop4: detected capacity change from 0 to 2048
[   71.164139][ T3540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   71.184116][ T3540] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.200902][ T3542]  loop4: p2 p3 p7
[   71.291656][  T383] udevd[383]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   71.291662][  T382] udevd[382]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[   71.311538][  T308] udevd[308]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   71.329701][ T1394] EXT4-fs (loop0): unmounting filesystem.
[   71.420543][ T3571] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1397'.
[   71.461208][ T3569] incfs: Options parsing error. -22
[   71.473036][ T3569] incfs: mount failed -22
[   71.574063][ T3587] loop5: detected capacity change from 0 to 1024
[   71.625648][ T3587] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   71.643614][ T3587] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.669363][ T3581] loop3: detected capacity change from 0 to 40427
[   71.686013][ T3581] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   71.706586][ T3581] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   71.727032][ T3587] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz.5.1404: directory missing '..'
[   71.739325][ T3581] F2FS-fs (loop3): invalid crc value
[   71.776424][ T3324] EXT4-fs (loop5): unmounting filesystem.
[   71.785853][ T3581] F2FS-fs (loop3): Found nat_bits in checkpoint
[   71.865997][ T3581] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   71.878739][ T3581] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   71.969816][ T3612] loop5: detected capacity change from 0 to 512
[   71.996402][ T3612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   72.036202][ T3612] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   72.045373][ T3612] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.134906][ T3624] loop3: detected capacity change from 0 to 1024
[   72.168770][ T3628] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1418'.
[   72.184780][ T3624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   72.242147][  T284] EXT4-fs (loop3): unmounting filesystem.
[   72.318694][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.325781][ T3639] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.353412][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   72.370863][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.380992][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.394750][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.401909][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.429369][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   72.434616][ T3612] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   72.438961][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.452379][ T3612] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   72.462105][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   72.472763][ T3612] EXT4-fs (loop5): This should not happen!! Data will be lost
[   72.472763][ T3612] 
[   72.482205][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.490395][ T3612] EXT4-fs (loop5): Total free blocks count 0
[   72.499885][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.504276][ T3612] EXT4-fs (loop5): Free/Dirty block details
[   72.514027][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.518191][ T3612] EXT4-fs (loop5): free_blocks=39626
[   72.528834][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.531880][ T3612] EXT4-fs (loop5): dirty_blocks=4095
[   72.541158][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.558779][ T3612] EXT4-fs (loop5): Block reservation details
[   72.568097][ T3612] EXT4-fs (loop5): i_reserved_data_blocks=4095
[   72.647645][   T10] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28
[   72.705474][ T3656] loop5: detected capacity change from 0 to 512
[   72.712081][ T3656] EXT4-fs: Ignoring removed bh option
[   72.718459][ T3656] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   72.729561][ T3656] EXT4-fs (loop5): 1 truncate cleaned up
[   72.735412][ T3656] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   72.753947][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   72.753960][   T28] audit: type=1400 audit(1753398715.532:1826): avc:  denied  { rename } for  pid=3655 comm="syz.5.1431" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   72.784075][ T3324] EXT4-fs (loop5): unmounting filesystem.
[   73.457064][   T28] audit: type=1326 audit(1753398716.232:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879dd8e9a9 code=0x7fc00000
[   73.496382][ T3667] loop5: detected capacity change from 0 to 512
[   73.535534][ T3667] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   73.565344][ T3677] loop4: detected capacity change from 0 to 512
[   73.569447][ T3667] EXT4-fs (loop5): 1 truncate cleaned up
[   73.590529][ T3667] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   73.627917][ T3677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   73.638191][ T3677] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   73.649212][ T3324] EXT4-fs (loop5): unmounting filesystem.
[   73.649320][ T3677] EXT4-fs (loop4): unmounting filesystem.
[   73.673651][ T3691] loop3: detected capacity change from 0 to 256
[   73.743474][   T28] audit: type=1400 audit(1753398716.512:1828): avc:  denied  { compute_member } for  pid=3702 comm="syz.5.1451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   73.853911][ T3720] loop3: detected capacity change from 0 to 512
[   73.875261][   T28] audit: type=1400 audit(1753398716.652:1829): avc:  denied  { remount } for  pid=3718 comm="syz.3.1457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   73.900844][ T3723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1459'.
[   74.013525][ T3739] x_tables: duplicate underflow at hook 4
[   74.073878][   T28] audit: type=1400 audit(1753398716.852:1830): avc:  denied  { connect } for  pid=3749 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   74.167552][   T28] audit: type=1400 audit(1753398716.942:1831): avc:  denied  { execute } for  pid=3765 comm="syz.2.1480" path="/285/file1" dev="tmpfs" ino=1491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   74.224045][ T3773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1482'.
[   74.295315][   T28] audit: type=1400 audit(1753398717.072:1832): avc:  denied  { mount } for  pid=3785 comm="syz.2.1499" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   74.372709][ T3798] 9pnet: p9_errstr2errno: server reported unknown error �@c�F	S
[   74.406223][ T3809] loop0: detected capacity change from 0 to 16
[   74.435127][ T3809] erofs: (device loop0): mounted with root inode @ nid 36.
[   74.469836][   T28] audit: type=1400 audit(1753398717.242:1833): avc:  denied  { relabelfrom } for  pid=3814 comm="syz.4.1503" name="NETLINK" dev="sockfs" ino=31017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   74.489440][ T3817] loop0: detected capacity change from 0 to 512
[   74.502392][ T3817] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.519870][   T28] audit: type=1400 audit(1753398717.252:1834): avc:  denied  { relabelto } for  pid=3814 comm="syz.4.1503" name="NETLINK" dev="sockfs" ino=31017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[   74.534281][ T3817] EXT4-fs: Ignoring removed bh option
[   74.575572][ T3817] EXT4-fs (loop0): Test dummy encryption mode enabled
[   74.590986][ T3817] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   74.605885][   T28] audit: type=1400 audit(1753398717.382:1835): avc:  denied  { read } for  pid=3825 comm="syz.4.1508" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   74.630408][ T3817] EXT4-fs (loop0): 1 truncate cleaned up
[   74.636457][ T3817] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   74.724067][ T1394] EXT4-fs (loop0): unmounting filesystem.
[   74.756224][ T3835] loop0: detected capacity change from 0 to 256
[   74.767623][ T3835] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[   74.791386][ T3834] exFAT-fs (loop0): invalid start cluster (520)
[   75.026726][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1526'.
[   75.097553][ T3878] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.097678][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.290247][ T3902] loop3: detected capacity change from 0 to 512
[   75.305177][ T3902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   75.305249][ T3902] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.325424][  T284] EXT4-fs (loop3): unmounting filesystem.
[   75.634486][ T3914] loop4: detected capacity change from 0 to 512
[   75.656632][ T3914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   75.694178][ T3914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   75.694245][ T3914] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.737077][ T3923] input: syz1 as /devices/virtual/input/input15
[   75.823009][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.839085][ T3914] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   75.854194][ T3914] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   75.868234][ T3914] EXT4-fs (loop4): This should not happen!! Data will be lost
[   75.868234][ T3914] 
[   75.878064][ T3914] EXT4-fs (loop4): Total free blocks count 0
[   75.884491][ T3914] EXT4-fs (loop4): Free/Dirty block details
[   75.890583][ T3914] EXT4-fs (loop4): free_blocks=39626
[   75.896432][ T3914] EXT4-fs (loop4): dirty_blocks=4095
[   75.906433][ T3914] EXT4-fs (loop4): Block reservation details
[   75.921196][ T3914] EXT4-fs (loop4): i_reserved_data_blocks=4095
[   76.021818][  T331] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28
[   76.036870][ T3951] loop3: detected capacity change from 0 to 512
[   76.083990][ T3951] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1564: casefold flag without casefold feature
[   76.106879][ T3951] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1564: couldn't read orphan inode 15 (err -117)
[   76.131735][ T3951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   76.196124][  T284] EXT4-fs (loop3): unmounting filesystem.
[   76.261304][ T3982] loop0: detected capacity change from 0 to 512
[   76.316542][ T3982] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1578: casefold flag without casefold feature
[   76.445850][ T3982] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1578: couldn't read orphan inode 15 (err -117)
[   76.463504][ T3982] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   76.474739][ T3997] device bridge1 entered promiscuous mode
[   76.558680][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.565894][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.602054][ T4013] loop4: detected capacity change from 0 to 512
[   76.622578][ T4013] EXT4-fs: Ignoring removed mblk_io_submit option
[   76.629605][ T4013] EXT4-fs: Ignoring removed bh option
[   76.641255][ T4013] EXT4-fs (loop4): Test dummy encryption mode enabled
[   76.659518][ T4013] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   76.673866][ T1394] EXT4-fs (loop0): unmounting filesystem.
[   76.704695][ T4013] EXT4-fs (loop4): 1 truncate cleaned up
[   76.710373][ T4013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   76.853120][  T286] EXT4-fs (loop4): unmounting filesystem.
[   76.891949][ T4044] loop4: detected capacity change from 0 to 512
[   76.924732][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'.
[   76.945314][ T4044] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1603: casefold flag without casefold feature
[   76.970224][ T4044] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1603: couldn't read orphan inode 15 (err -117)
[   76.983952][ T4044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   77.024132][ T4061] overlayfs: failed to clone upperpath
[   77.037365][  T286] EXT4-fs (loop4): unmounting filesystem.
[   77.324358][ T4109] loop3: detected capacity change from 0 to 512
[   77.330906][ T4109] EXT4-fs: Ignoring removed mblk_io_submit option
[   77.337751][ T4109] EXT4-fs: Ignoring removed bh option
[   77.343794][ T4109] EXT4-fs (loop3): Test dummy encryption mode enabled
[   77.352870][ T4109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   77.371847][ T4109] EXT4-fs (loop3): 1 truncate cleaned up
[   77.377707][ T4109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   77.445024][  T284] EXT4-fs (loop3): unmounting filesystem.
[   77.473719][ T4129] netlink: 'syz.3.1643': attribute type 1 has an invalid length.
[   77.482995][ T4129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1643'.
[   77.558806][ T4143] loop3: detected capacity change from 0 to 4096
[   77.570535][ T4143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   77.598685][ T4143] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[   77.655595][  T284] EXT4-fs (loop3): unmounting filesystem.
[   77.961319][   T28] kauditd_printk_skb: 23 callbacks suppressed
[   77.961333][   T28] audit: type=1400 audit(1753398720.732:1859): avc:  denied  { unmount } for  pid=4179 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   78.020718][ T4188] loop4: detected capacity change from 0 to 1024
[   78.027681][ T4188] EXT4-fs: Ignoring removed nobh option
[   78.068321][ T4188] EXT4-fs: Ignoring removed oldalloc option
[   78.095513][ T4188] EXT4-fs: Ignoring removed orlov option
[   78.118453][ T4188] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   78.145073][ T4188] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.1671: Allocating blocks 497-513 which overlap fs metadata
[   78.145507][ T4188] EXT4-fs (loop4): pa ffff88810cb63150: logic 256, phys. 385, len 8
[   78.145546][ T4188] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[   78.185037][  T286] EXT4-fs (loop4): unmounting filesystem.
[   79.043109][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   79.049168][ T2202] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   79.159613][ T4224] loop4: detected capacity change from 0 to 40427
[   79.177799][ T4224] F2FS-fs (loop4): invalid crc value
[   79.228636][ T4224] F2FS-fs (loop4): Found nat_bits in checkpoint
[   79.312083][ T4224] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   79.313412][   T28] audit: type=1400 audit(1753398722.082:1860): avc:  denied  { wake_alarm } for  pid=4256 comm="syz.5.1701" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   79.369039][  T286] syz-executor: attempt to access beyond end of device
[   79.369039][  T286] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   79.384898][  T286] syz-executor: attempt to access beyond end of device
[   79.384898][  T286] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   79.434713][  T393] kworker/u4:6: attempt to access beyond end of device
[   79.434713][  T393] loop4: rw=2049, sector=40960, nr_sectors = 88 limit=40427
[   79.672983][   T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   79.728971][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.736164][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.743888][ T4283] device bridge_slave_0 entered promiscuous mode
[   79.751149][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.758727][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.766600][ T4283] device bridge_slave_1 entered promiscuous mode
[   79.796919][ T4282] loop3: detected capacity change from 0 to 40427
[   79.806299][ T4282] F2FS-fs (loop3): invalid crc value
[   79.820745][ T4282] F2FS-fs (loop3): Found nat_bits in checkpoint
[   79.856491][ T4282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   79.864106][   T19] usb 1-1: config 0 has no interfaces?
[   79.874429][   T19] usb 1-1: New USB device found, idVendor=14aa, idProduct=2101, bcdDevice= f.79
[   79.897582][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.903314][  T284] syz-executor: attempt to access beyond end of device
[   79.903314][  T284] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   79.905027][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.905110][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.920569][  T284] syz-executor: attempt to access beyond end of device
[   79.920569][  T284] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   79.927310][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.928500][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.963789][   T19] usb 1-1: Product: syz
[   79.967964][   T19] usb 1-1: Manufacturer: syz
[   79.972635][   T19] usb 1-1: SerialNumber: syz
[   79.979858][   T43] kworker/u4:2: attempt to access beyond end of device
[   79.979858][   T43] loop3: rw=2049, sector=40960, nr_sectors = 88 limit=40427
[   79.996114][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.004333][   T19] usb 1-1: config 0 descriptor??
[   80.009788][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.018642][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.033603][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.044157][  T393] device bridge_slave_1 left promiscuous mode
[   80.050294][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.058057][  T393] device bridge_slave_0 left promiscuous mode
[   80.064390][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.072158][  T393] device veth1_macvtap left promiscuous mode
[   80.078503][  T393] device veth0_vlan left promiscuous mode
[   80.203236][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.244461][ T4283] device veth0_vlan entered promiscuous mode
[   80.251162][    T6] usb 1-1: USB disconnect, device number 6
[   80.258542][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.267845][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.276411][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.284301][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   80.297990][ T4283] device veth1_macvtap entered promiscuous mode
[   80.324386][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.337529][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.358375][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.528502][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[   80.550996][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.558436][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.566281][ T4312] device bridge_slave_0 entered promiscuous mode
[   80.574308][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.581490][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.589435][ T4312] device bridge_slave_1 entered promiscuous mode
[   80.648387][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.655459][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.662879][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.669950][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.699554][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.707331][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.716413][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.738980][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.747485][  T393] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.754566][  T393] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.762520][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.777719][  T393] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.784832][  T393] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.807517][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.815508][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.826224][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.838998][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.847094][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.854775][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   80.863362][ T4312] device veth0_vlan entered promiscuous mode
[   80.876100][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.885510][ T4312] device veth1_macvtap entered promiscuous mode
[   80.898045][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.907369][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.003987][  T331] device bridge_slave_1 left promiscuous mode
[   81.010149][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.033373][  T331] device bridge_slave_0 left promiscuous mode
[   81.039525][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.070421][  T331] device veth1_macvtap left promiscuous mode
[   81.076962][  T331] device veth0_vlan left promiscuous mode
[   81.226328][ T4358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.233597][ T4358] IPv6: NLM_F_CREATE should be set when creating new route
[   81.240795][ T4358] IPv6: NLM_F_CREATE should be set when creating new route
[   81.384758][ T4350] loop7: detected capacity change from 0 to 131072
[   81.394481][ T4350] F2FS-fs (loop7): invalid crc value
[   81.400954][ T4350] F2FS-fs (loop7): Found nat_bits in checkpoint
[   81.432700][ T4350] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   81.464741][   T28] audit: type=1400 audit(1753398727.243:1861): avc:  denied  { rename } for  pid=4349 comm="syz.7.1723" name="file0" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   81.498324][ T4370] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1750'.
[   81.524729][ T4375] incfs: Options parsing error. -22
[   81.530047][ T4375] incfs: mount failed -22
[   81.553732][   T28] audit: type=1400 audit(1753398727.333:1862): avc:  denied  { mount } for  pid=4378 comm="syz.2.1755" name="/" dev="configfs" ino=13275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   81.598654][   T28] audit: type=1400 audit(1753398727.353:1863): avc:  denied  { search } for  pid=4378 comm="syz.2.1755" name="/" dev="configfs" ino=13275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   81.627477][   T28] audit: type=1400 audit(1753398727.353:1864): avc:  denied  { read } for  pid=4378 comm="syz.2.1755" name="/" dev="configfs" ino=13275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   81.629311][ T4389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.656812][ T4389] IPv6: NLM_F_CREATE should be set when creating new route
[   81.664071][ T4389] IPv6: NLM_F_CREATE should be set when creating new route
[   81.688198][   T28] audit: type=1400 audit(1753398727.353:1865): avc:  denied  { open } for  pid=4378 comm="syz.2.1755" path="/" dev="configfs" ino=13275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   81.799795][ T4395] fuse: Bad value for 'fd'
[   81.844352][ T4403] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1764'.
[   82.029107][ T4420] loop7: detected capacity change from 0 to 256
[   82.051788][ T4420] exfat: Deprecated parameter 'utf8'
[   82.063310][ T4420] exfat: Deprecated parameter 'namecase'
[   82.071110][ T4420] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   82.091510][   T28] audit: type=1400 audit(1753398727.863:1866): avc:  denied  { append } for  pid=4419 comm="syz.7.1773" path="/4/file1/cpu.stat" dev="loop7" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   82.127790][   T28] audit: type=1400 audit(1753398727.893:1867): avc:  denied  { map } for  pid=4419 comm="syz.7.1773" path="/4/file1/cpu.stat" dev="loop7" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   82.175439][   T28] audit: type=1400 audit(1753398727.953:1868): avc:  denied  { load_policy } for  pid=4423 comm="syz.7.1774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   82.175850][ T4424] SELinux: failed to load policy
[   82.330496][ T4433] loop7: detected capacity change from 0 to 2048
[   82.348426][ T4433]  loop7: p2 p3 p7
[   82.412396][  T383] udevd[383]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[   82.412430][  T382] udevd[382]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory
[   82.424693][  T308] udevd[308]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[   82.444843][ T4443] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.447592][  T383] udevd[383]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[   82.457213][ T4443] FAT-fs (loop15): unable to read boot sector
[   82.466139][  T308] udevd[308]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[   82.481142][  T382] udevd[382]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory
[   82.529356][ T4451] loop7: detected capacity change from 0 to 128
[   82.542598][ T4451] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.550778][ T4451] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.563162][ T2202] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   82.563216][ T2203] Bluetooth: hci0: command 0x1003 tx timeout
[   82.574728][ T4451] EXT4-fs (loop7): Test dummy encryption mode enabled
[   82.582331][ T4316] Bluetooth: hci0: Opcode 0x080f failed: -4
[   82.612589][ T4451] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   82.630825][ T4456] ==================================================================
[   82.632254][ T4451] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   82.638993][ T4456] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[   82.639022][ T4456] Write of size 8 at addr ffff88811f708a00 by task ext4lazyinit/4456
[   82.639038][ T4456] 
[   82.639042][ T4456] CPU: 1 PID: 4456 Comm: ext4lazyinit Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0
[   82.639059][ T4456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   82.639075][ T4456] Call Trace:
[   82.639081][ T4456]  <TASK>
[   82.639088][ T4456]  __dump_stack+0x21/0x24
[   82.639112][ T4456]  dump_stack_lvl+0xee/0x150
[   82.639132][ T4456]  ? __cfi_dump_stack_lvl+0x8/0x8
[   82.706777][ T4456]  ? _raw_spin_lock+0x8e/0xe0
[   82.711452][ T4456]  ? enqueue_timer+0xae/0x480
[   82.716116][ T4456]  print_address_description+0x71/0x210
[   82.721649][ T4456]  print_report+0x4a/0x60
[   82.725960][ T4456]  kasan_report+0x122/0x150
[   82.730443][ T4456]  ? enqueue_timer+0xae/0x480
[   82.735100][ T4456]  __asan_report_store8_noabort+0x17/0x20
[   82.740806][ T4456]  enqueue_timer+0xae/0x480
[   82.745290][ T4456]  __mod_timer+0x79f/0xb30
[   82.749695][ T4456]  schedule_timeout+0x127/0x2e0
[   82.754528][ T4456]  ? __cfi_schedule_timeout+0x10/0x10
[   82.759886][ T4456]  ? _raw_spin_lock_irq+0x8f/0xe0
[   82.764896][ T4456]  ? __cfi_process_timeout+0x10/0x10
[   82.770185][ T4456]  ? __cfi_mutex_unlock+0x10/0x10
[   82.775198][ T4456]  ? cgroup_freezing+0x9c/0xc0
[   82.779954][ T4456]  schedule_timeout_interruptible+0x43/0x60
[   82.785840][ T4456]  ext4_lazyinit_thread+0xd56/0x1500
[   82.791106][ T4456]  ? _raw_spin_lock_irqsave+0xb0/0x110
[   82.796547][ T4456]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   82.802425][ T4456]  ? release_firmware_map_entry+0x194/0x194
[   82.808302][ T4456]  ? __cfi_ext4_lazyinit_thread+0x10/0x10
[   82.814002][ T4456]  ? __kasan_check_read+0x11/0x20
[   82.819007][ T4456]  ? __kthread_parkme+0x142/0x180
[   82.824013][ T4456]  kthread+0x281/0x320
[   82.828068][ T4456]  ? __cfi_ext4_lazyinit_thread+0x10/0x10
[   82.833781][ T4456]  ? __cfi_kthread+0x10/0x10
[   82.838359][ T4456]  ret_from_fork+0x1f/0x30
[   82.842767][ T4456]  </TASK>
[   82.845771][ T4456] 
[   82.848084][ T4456] Allocated by task 4316:
[   82.852383][ T4456]  kasan_set_track+0x4b/0x70
[   82.856951][ T4456]  kasan_save_alloc_info+0x25/0x30
[   82.862043][ T4456]  __kasan_kmalloc+0x95/0xb0
[   82.866607][ T4456]  __kmalloc+0xb1/0x1e0
[   82.870740][ T4456]  hci_alloc_dev_priv+0x27/0x1bd0
[   82.875744][ T4456]  hci_uart_tty_ioctl+0x3d6/0xa20
[   82.880767][ T4456]  tty_ioctl+0x8ef/0xc60
[   82.884996][ T4456]  __se_sys_ioctl+0x12f/0x1b0
[   82.889655][ T4456]  __x64_sys_ioctl+0x7b/0x90
[   82.894224][ T4456]  x64_sys_call+0x58b/0x9a0
[   82.898708][ T4456]  do_syscall_64+0x4c/0xa0
[   82.903103][ T4456]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   82.909061][ T4456] 
[   82.911386][ T4456] Freed by task 4316:
[   82.915357][ T4456]  kasan_set_track+0x4b/0x70
[   82.920028][ T4456]  kasan_save_free_info+0x31/0x50
[   82.925068][ T4456]  ____kasan_slab_free+0x132/0x180
[   82.930179][ T4456]  __kasan_slab_free+0x11/0x20
[   82.935168][ T4456]  slab_free_freelist_hook+0xc2/0x190
[   82.940554][ T4456]  __kmem_cache_free+0xb7/0x1b0
[   82.945398][ T4456]  kfree+0x6f/0xf0
[   82.949108][ T4456]  hci_release_dev+0x13ad/0x1500
[   82.954025][ T4456]  bt_host_release+0x82/0x90
[   82.958605][ T4456]  device_release+0xa4/0x1d0
[   82.963259][ T4456]  kobject_put+0x19d/0x280
[   82.967652][ T4456]  put_device+0x1f/0x30
[   82.971837][ T4456]  hci_dev_cmd+0x265/0x720
[   82.976255][ T4456]  hci_sock_ioctl+0x41e/0x7f0
[   82.981005][ T4456]  sock_do_ioctl+0x101/0x310
[   82.985681][ T4456]  sock_ioctl+0x4d8/0x6e0
[   82.990183][ T4456]  __se_sys_ioctl+0x12f/0x1b0
[   82.994950][ T4456]  __x64_sys_ioctl+0x7b/0x90
[   82.999537][ T4456]  x64_sys_call+0x58b/0x9a0
[   83.004021][ T4456]  do_syscall_64+0x4c/0xa0
[   83.008443][ T4456]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   83.014341][ T4456] 
[   83.016644][ T4456] Last potentially related work creation:
[   83.022344][ T4456]  kasan_save_stack+0x3a/0x60
[   83.027002][ T4456]  __kasan_record_aux_stack+0xb6/0xc0
[   83.032353][ T4456]  kasan_record_aux_stack_noalloc+0xb/0x10
[   83.038140][ T4456]  insert_work+0x51/0x300
[   83.042456][ T4456]  __queue_work+0x9b1/0xd30
[   83.046940][ T4456]  queue_work_on+0xd2/0x140
[   83.051435][ T4456]  __hci_cmd_sync_sk+0xa3e/0xcf0
[   83.056351][ T4456]  hci_cmd_sync_status+0x53/0x120
[   83.061356][ T4456]  hci_dev_cmd+0x628/0x720
[   83.065757][ T4456]  hci_sock_ioctl+0x41e/0x7f0
[   83.070414][ T4456]  sock_do_ioctl+0x101/0x310
[   83.074989][ T4456]  sock_ioctl+0x4d8/0x6e0
[   83.079297][ T4456]  __se_sys_ioctl+0x12f/0x1b0
[   83.083958][ T4456]  __x64_sys_ioctl+0x7b/0x90
[   83.088532][ T4456]  x64_sys_call+0x58b/0x9a0
[   83.093034][ T4456]  do_syscall_64+0x4c/0xa0
[   83.097438][ T4456]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   83.103396][ T4456] 
[   83.105705][ T4456] Second to last potentially related work creation:
[   83.112259][ T4456]  kasan_save_stack+0x3a/0x60
[   83.116916][ T4456]  __kasan_record_aux_stack+0xb6/0xc0
[   83.122268][ T4456]  kasan_record_aux_stack_noalloc+0xb/0x10
[   83.128054][ T4456]  insert_work+0x51/0x300
[   83.132364][ T4456]  __queue_work+0x9b1/0xd30
[   83.136844][ T4456]  queue_work_on+0xd2/0x140
[   83.141327][ T4456]  hci_cmd_timeout+0x191/0x200
[   83.146079][ T4456]  process_one_work+0x71f/0xc40
[   83.150908][ T4456]  worker_thread+0xa29/0x11f0
[   83.155572][ T4456]  kthread+0x281/0x320
[   83.159635][ T4456]  ret_from_fork+0x1f/0x30
[   83.164036][ T4456] 
[   83.166342][ T4456] The buggy address belongs to the object at ffff88811f708000
[   83.166342][ T4456]  which belongs to the cache kmalloc-8k of size 8192
[   83.180377][ T4456] The buggy address is located 2560 bytes inside of
[   83.180377][ T4456]  8192-byte region [ffff88811f708000, ffff88811f70a000)
[   83.193818][ T4456] 
[   83.196151][ T4456] The buggy address belongs to the physical page:
[   83.202544][ T4456] page:ffffea00047dc200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f708
[   83.212772][ T4456] head:ffffea00047dc200 order:3 compound_mapcount:0 compound_pincount:0
[   83.221083][ T4456] flags: 0x4000000000010200(slab|head|zone=1)
[   83.227155][ T4456] raw: 4000000000010200 ffffea0004805e00 dead000000000006 ffff888100043500
[   83.235810][ T4456] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[   83.244363][ T4456] page dumped because: kasan: bad access detected
[   83.250747][ T4456] page_owner tracks the page as allocated
[   83.256433][ T4456] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 125, tgid 125 (dbus-daemon), ts 4885250656, free_ts 0
[   83.274646][ T4456]  post_alloc_hook+0x1f5/0x210
[   83.279404][ T4456]  prep_new_page+0x1c/0x110
[   83.283889][ T4456]  get_page_from_freelist+0x2c7b/0x2cf0
[   83.289508][ T4456]  __alloc_pages+0x19e/0x3a0
[   83.294079][ T4456]  alloc_slab_page+0x6e/0xf0
[   83.298659][ T4456]  new_slab+0x98/0x3d0
[   83.302769][ T4456]  ___slab_alloc+0x6f6/0xb50
[   83.307420][ T4456]  __slab_alloc+0x5e/0xa0
[   83.311836][ T4456]  __kmem_cache_alloc_node+0x203/0x2c0
[   83.317275][ T4456]  kmalloc_trace+0x29/0xb0
[   83.321767][ T4456]  audit_log_d_path+0xc6/0x240
[   83.326523][ T4456]  common_lsm_audit+0x327/0x16d0
[   83.331450][ T4456]  slow_avc_audit+0x1ac/0x220
[   83.336104][ T4456]  avc_has_perm+0x1e6/0x240
[   83.340625][ T4456]  file_has_perm+0x4a1/0x640
[   83.345209][ T4456]  match_file+0xc8/0x130
[   83.349520][ T4456] page_owner free stack trace missing
[   83.354881][ T4456] 
[   83.357191][ T4456] Memory state around the buggy address:
[   83.362794][ T4456]  ffff88811f708900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.370832][ T4456]  ffff88811f708980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.378870][ T4456] >ffff88811f708a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.386903][ T4456]                    ^
[   83.390943][ T4456]  ffff88811f708a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.398979][ T4456]  ffff88811f708b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.407014][ T4456] ==================================================================
[   83.415047][ T4456] Disabling lock debugging due to kernel taint
SYZFAIL: failed to send rpc
fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe)
[   83.425944][   T28] audit: type=1400 audit(1753398729.193:1869): avc:  denied  { write } for  pid=275 comm="syz-executor" path="pipe:[14732]" dev="pipefs" ino=14732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   83.471575][   T28] audit: type=1400 audit(1753398729.223:1870): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   83.495597][ T4451] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   83.562874][   T28] audit: type=1400 audit(1753398729.223:1871): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.632966][   T28] audit: type=1400 audit(1753398729.223:1872): avc:  denied  { append } for  pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   83.679608][   T28] audit: type=1400 audit(1753398729.223:1873): avc:  denied  { open } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   83.707138][   T28] audit: type=1400 audit(1753398729.223:1874): avc:  denied  { getattr } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   83.842699][ T4450] EXT4-fs (loop7): unmounting filesystem.
[   84.223516][  T393] device bridge_slave_1 left promiscuous mode
[   84.229672][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.237158][  T393] device bridge_slave_0 left promiscuous mode
[   84.243436][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.251035][  T393] device veth1_macvtap left promiscuous mode
[   84.257077][  T393] device veth0_vlan left promiscuous mode
[   84.643053][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[   84.654867][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   84.663359][    C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G    B              6.1.141-syzkaller-00042-g96160a0e0aa1 #0
[   84.674366][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   84.684426][    C1] RIP: 0010:__queue_work+0x575/0xd30
[   84.689712][    C1] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 d2 28 00 4c 89 ff e8 f0 1f a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 2c 6d 00 49 8b 7d 00 e8 d3 1b
[   84.709384][    C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046
[   84.715431][    C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003b5100
[   84.723385][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   84.731367][    C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007
[   84.739364][    C1] R10: ffffed1023ee1139 R11: 1ffff11023ee1139 R12: dffffc0000000000
[   84.747328][    C1] R13: 0000000000000000 R14: ffff88811f7089c8 R15: 0000000000000008
[   84.755300][    C1] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   84.764221][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   84.770798][    C1] CR2: 000055f8c0ff4b90 CR3: 0000000006e0f000 CR4: 00000000003506a0
[   84.778955][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   84.787002][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   84.795048][    C1] Call Trace:
[   84.798305][    C1]  <IRQ>
[   84.801127][    C1]  delayed_work_timer_fn+0x61/0x80
[   84.806226][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   84.812024][    C1]  call_timer_fn+0x46/0x2a0
[   84.816508][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   84.822291][    C1]  __run_timers+0x667/0x9a0
[   84.826800][    C1]  ? calc_index+0x200/0x200
[   84.831278][    C1]  ? kvm_sched_clock_read+0x18/0x40
[   84.836451][    C1]  run_timer_softirq+0x6a/0xf0
[   84.841213][    C1]  handle_softirqs+0x1d7/0x600
[   84.846041][    C1]  ? irqtime_account_irq+0xc4/0x240
[   84.851402][    C1]  __irq_exit_rcu+0x52/0xf0
[   84.855895][    C1]  irq_exit_rcu+0x9/0x10
[   84.860122][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   84.865826][    C1]  </IRQ>
[   84.868737][    C1]  <TASK>
[   84.871737][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   84.877699][    C1] RIP: 0010:default_idle+0xf/0x20
[   84.882792][    C1] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 03 19 56 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[   84.902460][    C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257
[   84.908596][    C1] RAX: ffff8881f7100000 RBX: ffff8881003b5100 RCX: 09db80ac6abfbe00
[   84.916643][    C1] RDX: 0000000000000001 RSI: ffffffff85aa0000 RDI: ffffffff85a9ffc0
[   84.924594][    C1] RBP: ffffc90000147dd8 R08: dffffc0000000000 R09: ffffed103ee26917
[   84.932547][    C1] R10: 0000000000000000 R11: ffffffff84f01a70 R12: 0000000000000000
[   84.940509][    C1] R13: 0000000000000000 R14: ffff8881003b5100 R15: dffffc0000000000
[   84.948468][    C1]  ? __cfi_default_idle+0x10/0x10
[   84.953478][    C1]  arch_cpu_idle+0x1c/0x20
[   84.957872][    C1]  default_idle_call+0x71/0x1d0
[   84.962707][    C1]  do_idle+0x1a7/0x520
[   84.966750][    C1]  ? idle_inject_timer_fn+0x60/0x60
[   84.971924][    C1]  ? schedule_idle+0x5b/0x90
[   84.976506][    C1]  cpu_startup_entry+0x43/0x60
[   84.981247][    C1]  start_secondary+0x119/0x120
[   84.985984][    C1]  secondary_startup_64_no_verify+0xce/0xdb
[   84.991853][    C1]  </TASK>
[   84.994852][    C1] Modules linked in:
[   84.998729][    C1] ---[ end trace 0000000000000000 ]---
[   85.004157][    C1] RIP: 0010:__queue_work+0x575/0xd30
[   85.009423][    C1] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 d2 28 00 4c 89 ff e8 f0 1f a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 2c 6d 00 49 8b 7d 00 e8 d3 1b
[   85.029004][    C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046
[   85.035072][    C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003b5100
[   85.043029][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   85.051060][    C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007
[   85.059022][    C1] R10: ffffed1023ee1139 R11: 1ffff11023ee1139 R12: dffffc0000000000
[   85.066992][    C1] R13: 0000000000000000 R14: ffff88811f7089c8 R15: 0000000000000008
[   85.074970][    C1] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   85.083889][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   85.090464][    C1] CR2: 000055f8c0ff4b90 CR3: 0000000006e0f000 CR4: 00000000003506a0
[   85.098416][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   85.106370][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   85.114320][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[   85.121624][    C1] Kernel Offset: disabled
[   85.125930][    C1] Rebooting in 86400 seconds..